Static task
static1
Behavioral task
behavioral1
Sample
4bb97bee0acb0d2f6fa797380b18764229722f76849feb0523a4f057190b00a7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4bb97bee0acb0d2f6fa797380b18764229722f76849feb0523a4f057190b00a7.exe
Resource
win10v2004-20220812-en
General
-
Target
4bb97bee0acb0d2f6fa797380b18764229722f76849feb0523a4f057190b00a7
-
Size
51KB
-
MD5
6a95e7cf749418a8784d8e3d03597bb1
-
SHA1
c655b56b1cf46250befece85cfefc92c60215b92
-
SHA256
4bb97bee0acb0d2f6fa797380b18764229722f76849feb0523a4f057190b00a7
-
SHA512
562f1f5d2f27cb9074d91c5d41962f7946bc54fdf72362e2a7aac71430eddb3beee2e84e80abffa8c54787830c8f62cf85d1d1efe160d634d7d4a6a58fa96baf
-
SSDEEP
1536:hqa+k2h1hohx6Q2oIKGlB+Skfu43aax3j8Moe+2:8a+DohgQ2olGlwVd3aax3j8Mu2
Malware Config
Signatures
Files
-
4bb97bee0acb0d2f6fa797380b18764229722f76849feb0523a4f057190b00a7.exe windows x86
51cc867a15a34da8540b5d70d2ba2951
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetTickCount
InterlockedIncrement
Sleep
VirtualFree
InterlockedIncrement
Sleep
VirtualFree
msimg32
AlphaBlend
GradientFill
ole32
OleDraw
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
IsValidPtrIn
IsValidPtrOut
CoTaskMemFree
CoTaskMemAlloc
ProgIDFromCLSID
StringFromCLSID
CoCreateInstance
CoLockObjectExternal
CoDisconnectObject
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
CoGetMalloc
CoUninitialize
CoInitialize
advapi32
SetTokenInformation
SetSecurityDescriptorDacl
RegSetValueExW
RegSetValueExA
RegQueryValueExW
Sections
.text Size: 1024B - Virtual size: 877B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ