Static task
static1
Behavioral task
behavioral1
Sample
d8666097b40c63fba395c57ac3d4df7dbc353f2c09d740cdb9babc4fa6a8f212.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d8666097b40c63fba395c57ac3d4df7dbc353f2c09d740cdb9babc4fa6a8f212.exe
Resource
win10v2004-20221111-en
General
-
Target
d8666097b40c63fba395c57ac3d4df7dbc353f2c09d740cdb9babc4fa6a8f212
-
Size
21KB
-
MD5
f9f168b02e4569395317f073b34dab73
-
SHA1
4f7833b8be171b670a729bdbdf9f987cc8d058bf
-
SHA256
d8666097b40c63fba395c57ac3d4df7dbc353f2c09d740cdb9babc4fa6a8f212
-
SHA512
7866b059a700b394ae47232dfcdb97c4221ba0ff616bf2aebbcd3e291d3b54dbcb4dac4005d0676353aef84ed702a5333821def4ade74e6543363efc4ec0f53b
-
SSDEEP
384:H4Pt0PzH0nk2LyGbUZxOH09Ohk+r1NU2qxdeWe+JWe:YF0Pz0npyGbv09O6UXGB
Malware Config
Signatures
Files
-
d8666097b40c63fba395c57ac3d4df7dbc353f2c09d740cdb9babc4fa6a8f212.exe windows x86
d6df2b39bb207fe716e452e16b7bac86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_EH_prolog
_purecall
realloc
malloc
free
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__p__commode
__setusermatherr
_adjust_fdiv
_except_handler3
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_controlfp
advapi32
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA
RegEnumValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
kernel32
lstrlenA
GetModuleHandleA
DeleteCriticalSection
InterlockedIncrement
lstrcatA
GetStartupInfoA
lstrcpyA
LoadLibraryA
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryExA
InterlockedDecrement
lstrcmpiA
GetCurrentThreadId
GetCommandLineA
GetVersion
FreeLibrary
GetProcAddress
FindResourceA
lstrcpynA
InitializeCriticalSection
GetLastError
lstrlenW
SizeofResource
LoadResource
user32
DispatchMessageA
GetMessageA
CharNextA
PostThreadMessageA
ole32
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
CoInitializeSecurity
CoUninitialize
CoSuspendClassObjects
oleaut32
LoadTypeLi
VarI4FromStr
RegisterTypeLi
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ