Static task
static1
Behavioral task
behavioral1
Sample
0f488ccf2a4af8a77c61259e7cffdb2c884ec083b8337237db161410aaae578a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0f488ccf2a4af8a77c61259e7cffdb2c884ec083b8337237db161410aaae578a.exe
Resource
win10v2004-20220901-en
General
-
Target
0f488ccf2a4af8a77c61259e7cffdb2c884ec083b8337237db161410aaae578a
-
Size
262KB
-
MD5
316ff972fdca24a6cdc3c2b2d2944406
-
SHA1
7458df525e2dc5211b9d995a429ed37bccdbaf7f
-
SHA256
0f488ccf2a4af8a77c61259e7cffdb2c884ec083b8337237db161410aaae578a
-
SHA512
8f1b8317401837163e09907ffd0e19798345ee62740307331e5acb1e7290349c0eb14ac33073688c57678316b65b4eb3ae405420311d5f3a541827f48653f4f6
-
SSDEEP
6144:byxixtEHSSZ0TEOAeBgmr1GHoZkMiRk9LNVnIkh5r:byxix1SafBH1GIZbJVnPN
Malware Config
Signatures
Files
-
0f488ccf2a4af8a77c61259e7cffdb2c884ec083b8337237db161410aaae578a.exe windows x86
59cc3ef26a24f41ad458286f60f51e2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord823
ord825
msvcrt
malloc
free
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
__CxxFrameHandler
_purecall
wcslen
wcsncpy
_except_handler3
_wcsnicmp
atl
ord16
ord18
ord22
ord15
ord32
ord21
kernel32
GetProcAddress
LoadLibraryW
SetLastError
Sleep
OutputDebugStringW
user32
GetDlgCtrlID
WinHelpW
GetWindowTextLengthW
UpdateWindow
GetDlgItem
PostMessageW
SendMessageW
RegisterClipboardFormatW
LoadStringW
wsprintfW
ShowWindow
SetWindowTextW
GetWindowTextW
SetWindowLongW
CheckDlgButton
IsDlgButtonChecked
GetWindowLongW
EndDialog
SetFocus
IsWindow
SendDlgItemMessageW
GetActiveWindow
DialogBoxParamW
MessageBoxW
EnableWindow
advapi32
RegOpenKeyExA
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExA
RegEnumKeyExW
RegOpenKeyW
RegDeleteValueW
RegSetValueExW
RegDeleteKeyW
RegCloseKey
ole32
CoCreateInstance
ReleaseStgMedium
StringFromCLSID
CoTaskMemFree
Sections
.text Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 114KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ggu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 114KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ