Static task
static1
Behavioral task
behavioral1
Sample
2bff5ba0903ba2a96ff393e9ccd849da546a826e530ed2a6f29a06122ad56189.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2bff5ba0903ba2a96ff393e9ccd849da546a826e530ed2a6f29a06122ad56189.exe
Resource
win10v2004-20220812-en
General
-
Target
2bff5ba0903ba2a96ff393e9ccd849da546a826e530ed2a6f29a06122ad56189
-
Size
220KB
-
MD5
0e0a012632f60b66ebdf44cfd34eb317
-
SHA1
70eb059c0dda64726c142b94f71569e236d584fe
-
SHA256
2bff5ba0903ba2a96ff393e9ccd849da546a826e530ed2a6f29a06122ad56189
-
SHA512
e8dec239fe827ee366076002907b4e5e8dd5ce0c992e4862050e209aada340ad6ed80bafc76dbf811661baf3b73e80c0c0aedbe8a6a8e5aefb3da2dff53476e6
-
SSDEEP
3072:P4bB66SgTOvi5ekKr7kUYUdD97yUnJPDm9n1krfTCcOrpTAa9oR8f27R09uohyOk:P40GUnPsUN5RDJ7m9nGavrpFY/09hhVk
Malware Config
Signatures
Files
-
2bff5ba0903ba2a96ff393e9ccd849da546a826e530ed2a6f29a06122ad56189.exe windows x86
7420c1a8092bc0deab45910b791bc533
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LCMapStringA
CreateFileA
GetCurrentProcess
CloseHandle
LoadLibraryA
user32
SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow
advapi32
RegOpenKeyA
RegDeleteValueA
RegEnumKeyA
RegSetValueA
RegEnumValueA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegQueryValueA
Sections
.text Size: 202KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ