Static task
static1
Behavioral task
behavioral1
Sample
79eddfa6f405722ed1a449d8de0286816a91d84939e32419e4577c0cb579820f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
79eddfa6f405722ed1a449d8de0286816a91d84939e32419e4577c0cb579820f.exe
Resource
win10v2004-20221111-en
General
-
Target
79eddfa6f405722ed1a449d8de0286816a91d84939e32419e4577c0cb579820f
-
Size
40KB
-
MD5
8b4163d7525f4e3ee4b0fa04e962c947
-
SHA1
238b6b4e3d911a606d728756a6b4c33091fd3b33
-
SHA256
79eddfa6f405722ed1a449d8de0286816a91d84939e32419e4577c0cb579820f
-
SHA512
2ac76aa267cef6df0c8a4b8ab6f5be9400e923410464b2992543e810bb5a0a1b4cf63ccaac1c0b23020a9b7d8077f72fcc7c1ae73f063b379edee7c61ff7b470
-
SSDEEP
384:XMWyv+zzM6KUnt9HJ6cxcGGWGFdZ/xcQaXUp575aTWvin6+k:3MR6fdp2xWGFJcQaXUp57546R
Malware Config
Signatures
Files
-
79eddfa6f405722ed1a449d8de0286816a91d84939e32419e4577c0cb579820f.exe windows x86
a614443e9c76b6ec51af3dd02d1bc05d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
CreateFileA
lstrcpyA
WinExec
lstrcmpA
GetModuleHandleA
ExitProcess
DeviceIoControl
user32
DefWindowProcA
TrackPopupMenu
ClientToScreen
CreatePopupMenu
CheckMenuItem
ChangeMenuA
SendMessageA
InvalidateRect
SetWindowPos
GetActiveWindow
DestroyMenu
GetSystemMenu
GetSystemMetrics
EndPaint
BeginPaint
PostQuitMessage
GetWindowRect
SetFocus
GetWindow
IsWindowVisible
GetWindowLongA
PostMessageA
GetDesktopWindow
CreateIconIndirect
SetForegroundWindow
LoadBitmapA
DestroyIcon
ModifyMenuA
ScreenToClient
GetCursorPos
FillRect
SystemParametersInfoA
GetDC
ReleaseDC
WinHelpA
LoadIconA
LoadCursorA
RegisterClassA
LoadStringA
CreateWindowExA
RegisterWindowMessageA
MessageBoxA
GetWindowTextA
GetSysColor
ShowWindow
UpdateWindow
SetTimer
TranslateMessage
DispatchMessageA
GetMessageA
KillTimer
gdi32
CreateSolidBrush
CreateBitmap
DeleteDC
BitBlt
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SetBkColor
SelectObject
SetTextColor
shell32
Shell_NotifyIconA
comctl32
ord17
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 458B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ