Static task
static1
Behavioral task
behavioral1
Sample
29f5b14e969311a2b17e53f72105316671680837cec9f53c7520fe0775807422.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
29f5b14e969311a2b17e53f72105316671680837cec9f53c7520fe0775807422.exe
Resource
win10v2004-20220901-en
General
-
Target
29f5b14e969311a2b17e53f72105316671680837cec9f53c7520fe0775807422
-
Size
18KB
-
MD5
9de1c02cb8f6203bcf3b6f79962adb7b
-
SHA1
79b9d852150ce8504cd9e1a0a8fbab8f85c06903
-
SHA256
29f5b14e969311a2b17e53f72105316671680837cec9f53c7520fe0775807422
-
SHA512
c3663475e1f25351b4ec6587e85549da74a72ee1d07d286c0d0d8b368a42f8a807995e5e31e34397e860c2712f0ff1ffd848d523313d744e10422ead18d8285b
-
SSDEEP
192:K790pylszn3MPFjuOZrCZ047a1oyn361miLMgepar8Vd/d:s2pzn4sOZrCv7a18wiLMge68VdV
Malware Config
Signatures
Files
-
29f5b14e969311a2b17e53f72105316671680837cec9f53c7520fe0775807422.exe windows x86
87de4726176398505728aeed27b55948
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
_controlfp
_XcptFilter
_except_handler3
__set_app_type
__p__fmode
_exit
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
user32
PostQuitMessage
SendMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
RegisterClassExA
LoadAcceleratorsA
GetMessageA
TranslateMessage
DispatchMessageA
DialogBoxParamA
kernel32
GetModuleFileNameA
GetLogicalDriveStringsA
GetEnvironmentStringsA
DeleteFileA
lstrcpynA
CloseHandle
GetStdHandle
HeapCreate
GetModuleHandleA
GetProcessHeap
HeapAlloc
CreateFileA
GetStartupInfoA
GetFileType
HeapFree
GetFileSize
GetTickCount
gdi32
CreateFontIndirectA
comctl32
ord17
shfolder
SHGetFolderPathA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ