Static task
static1
Behavioral task
behavioral1
Sample
31a356aad22a518fac6801bccd6e4fd9d13b974b2858685f06b906f3380ec78d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
31a356aad22a518fac6801bccd6e4fd9d13b974b2858685f06b906f3380ec78d.exe
Resource
win10v2004-20220812-en
General
-
Target
31a356aad22a518fac6801bccd6e4fd9d13b974b2858685f06b906f3380ec78d
-
Size
36KB
-
MD5
4cf5e8aee8ed9b9d99bcc4e6466f3e84
-
SHA1
3779c434ade0cb5bf1bf05731e40c32d03ebd7ff
-
SHA256
31a356aad22a518fac6801bccd6e4fd9d13b974b2858685f06b906f3380ec78d
-
SHA512
5e53a1d60d01818225c3f9dd87a75b96cddf2adbe5055e8c4dd7b0bba4b940fbb8d6138383bac76fc4b9438fd448eb5ef4832a362dad075615b391a2f0ad4081
-
SSDEEP
768:cwuuXwVLaufY3gCOETbVNxwtpOwQLuo2j:ieiuO4VNxvuoQ
Malware Config
Signatures
Files
-
31a356aad22a518fac6801bccd6e4fd9d13b974b2858685f06b906f3380ec78d.exe windows x86
d3827cc24af70bf2ced98f163949a91d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
IsWindowVisible
UpdateWindow
PostMessageA
kernel32
LoadLibraryW
GetModuleHandleA
GetStartupInfoA
SetConsoleCP
CloseHandle
GetOEMCP
CompareFileTime
FindFirstFileA
FindResourceExW
GetCurrentThreadId
SetStdHandle
LoadLibraryA
lstrcmpiW
GetACP
VirtualProtect
ExitProcess
HeapAlloc
GetLastError
WritePrivateProfileStringA
VirtualAlloc
LoadResource
GetCurrentProcessId
SetCurrentDirectoryA
LeaveCriticalSection
GetModuleFileNameW
GetVersionExA
WaitForSingleObject
IsDebuggerPresent
gdi32
ExcludeClipRect
msvcrt
_fileno
fprintf
ole32
OleInitialize
StringFromGUID2
CoTaskMemAlloc
CreateStreamOnHGlobal
advapi32
RegDeleteKeyW
RegEnumValueW
RegCloseKey
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 106B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ