Static task
static1
Behavioral task
behavioral1
Sample
ba0ab5f4f355ca2d07b4151479564bd9175e6ff5bb07f7cc7067a3583f4d9b93.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ba0ab5f4f355ca2d07b4151479564bd9175e6ff5bb07f7cc7067a3583f4d9b93.exe
Resource
win10v2004-20220901-en
General
-
Target
ba0ab5f4f355ca2d07b4151479564bd9175e6ff5bb07f7cc7067a3583f4d9b93
-
Size
114KB
-
MD5
97df82ab12faae3ad97d4611082eb8b1
-
SHA1
88e74c42f74170166be91441c8f82388973fbbb3
-
SHA256
ba0ab5f4f355ca2d07b4151479564bd9175e6ff5bb07f7cc7067a3583f4d9b93
-
SHA512
553d7ee2937117e155b944433196c181e86db33b4d0f6e1c16a26ea8efd6938f063067db4fe43f244451b097379ac73e846389f9e68dcec1ce4f18ee1f2fe3a2
-
SSDEEP
3072:D3gYHuXjd/cPjgC4iZFhdU0237zFHQf8DKZGAvhcO:5U/cr74qFvzQ7xHQYSGU
Malware Config
Signatures
Files
-
ba0ab5f4f355ca2d07b4151479564bd9175e6ff5bb07f7cc7067a3583f4d9b93.exe windows x86
f447edc0772cee288d161d574f63321f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegLoadKeyA
user32
GetActiveWindow
IsWindowEnabled
GetCursor
shlwapi
SHDeleteValueA
oleaut32
SafeArrayUnaccessData
GetErrorInfo
SafeArrayPtrOfIndex
SafeArrayCreate
SafeArrayGetElement
RegisterTypeLib
kernel32
GetVersionExA
VirtualAlloc
GetProcAddress
GetLastError
ExitThread
GetModuleHandleA
comdlg32
GetOpenFileNameA
ChooseColorA
version
VerInstallFileA
GetFileVersionInfoSizeA
GetFileVersionInfoA
ole32
CoCreateInstanceEx
CoUninitialize
CoDisconnectObject
gdi32
RestoreDC
BitBlt
Sections
CODE Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 393B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE