?InsertCustomData@@YGKXZ
Static task
static1
Behavioral task
behavioral1
Sample
199f9f4e4305ceaef3dac69e431db5dbbf364981f5db76b6e599a9d207ae51d5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
199f9f4e4305ceaef3dac69e431db5dbbf364981f5db76b6e599a9d207ae51d5.exe
Resource
win10v2004-20220812-en
General
-
Target
199f9f4e4305ceaef3dac69e431db5dbbf364981f5db76b6e599a9d207ae51d5
-
Size
187KB
-
MD5
ee2f03e7c4220b32241bb5dee795f595
-
SHA1
c83fc42eb657f8138cdfc2284557288b6296a17f
-
SHA256
199f9f4e4305ceaef3dac69e431db5dbbf364981f5db76b6e599a9d207ae51d5
-
SHA512
ecf2d2e2a27fba5da839af0644941f5d8d495a98e9d590706690ac7932229c5a78a3d65f4a73f7e5a1713824c96ef3122f5be79c9f6c0e2481753964697b095a
-
SSDEEP
3072:hv5vSWPt4BY2n1wRrenEgVFpLBMA3GzzUAbi3uGmftVzl2qK/:1szKChEgBLBMA3GnUA2+1zl2j/
Malware Config
Signatures
Files
-
199f9f4e4305ceaef3dac69e431db5dbbf364981f5db76b6e599a9d207ae51d5.exe windows x86
65f1779b686361b65fa2914474ac66e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryA
EnumResourceTypesA
GetFileInformationByHandle
FlushFileBuffers
WaitForSingleObjectEx
EnumSystemLocalesA
HeapAlloc
shlwapi
PathUnquoteSpacesW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
user32
GetForegroundWindow
MessageBoxW
KillTimer
CheckRadioButton
ntdll
RtlCaptureContext
Exports
Exports
Sections
.text Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ