Static task
static1
Behavioral task
behavioral1
Sample
31d79a8fafc40f9803e5f4d68df185ab89282b320e2ade9367efc7a3f00517af.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
31d79a8fafc40f9803e5f4d68df185ab89282b320e2ade9367efc7a3f00517af.exe
Resource
win10v2004-20220901-en
General
-
Target
31d79a8fafc40f9803e5f4d68df185ab89282b320e2ade9367efc7a3f00517af
-
Size
100KB
-
MD5
8cc62676d658d26b50cdb9566026ca33
-
SHA1
67cdce123aef9abc08d44faf4768fd85a80bdd26
-
SHA256
31d79a8fafc40f9803e5f4d68df185ab89282b320e2ade9367efc7a3f00517af
-
SHA512
669325dfb6bfca5bf5d86c146d39d9d79060fd6bec9f762851f2d6d5f62615359e16c65d21278a1a033f4ee33668c7cd1c1277cb89fdc301867e1007f1207fef
-
SSDEEP
3072:2kc6VTmXRbOZp82QLlXpFye29v6D41Glw1lN+ZU4C:NmH2ARpq6MXHcuP
Malware Config
Signatures
Files
-
31d79a8fafc40f9803e5f4d68df185ab89282b320e2ade9367efc7a3f00517af.exe windows x86
f76e6230615fd94ca94cb5b07f58c2d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
ExitProcess
HeapReAlloc
GetVolumeInformationA
HeapAlloc
CreateMutexA
CreateProcessA
InterlockedDecrement
MultiByteToWideChar
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetComputerNameA
SetFilePointer
ole32
OleCreate
CoTaskMemAlloc
CoInitialize
user32
SetWindowLongA
UpdateWindow
DestroyWindow
DefWindowProcA
TranslateMessage
CreateWindowExA
ShowWindow
GetWindowLongA
MessageBoxA
oleaut32
SysAllocString
SysFreeString
advapi32
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ