Static task
static1
Behavioral task
behavioral1
Sample
942bab3d4fa8187cc3d14df0188c1f6ceec53fa12d57682c012649b81b87f3ee.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
942bab3d4fa8187cc3d14df0188c1f6ceec53fa12d57682c012649b81b87f3ee.exe
Resource
win10v2004-20220812-en
General
-
Target
942bab3d4fa8187cc3d14df0188c1f6ceec53fa12d57682c012649b81b87f3ee
-
Size
5.7MB
-
MD5
16a77960158f5420825e029a02259c07
-
SHA1
34f7788822dfc537c73b7b5c6ad0b6ce22b4bb1b
-
SHA256
942bab3d4fa8187cc3d14df0188c1f6ceec53fa12d57682c012649b81b87f3ee
-
SHA512
ca48b249262c3d57896996ef4ca61765ba26f9aac4429717302e57d5d1ba34b8a5ff45eb7ca30bab8b90ac4d5827e35b86439998da47de68cd4cc281ab50072a
-
SSDEEP
98304:mMASDDj0z7bysyKnf/kNGCCamkZ2A8Ebfm7NUYDQV8L9nMJJ0IM+Zq0hJg4wYVYs:NTDct/kNzCamk8A8ESmYDo8L9nMD0IMk
Malware Config
Signatures
Files
-
942bab3d4fa8187cc3d14df0188c1f6ceec53fa12d57682c012649b81b87f3ee.exe windows x86
67a2d4101a62901cebe9eb8a25de8ccc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles
ExitWindowsEx
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
advapi32
RegQueryValueExA
RegSetValueExA
oleaut32
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
shell32
SHFileOperationA
wininet
InternetGetConnectedState
wsock32
WSACleanup
Sections
.text Size: 21KB - Virtual size: 19.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE