Static task
static1
Behavioral task
behavioral1
Sample
ed8f0e4b100cd67aa276acb6a1e0324ef1914611fec20de61bfc5a33c6694984.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed8f0e4b100cd67aa276acb6a1e0324ef1914611fec20de61bfc5a33c6694984.exe
Resource
win10v2004-20221111-en
General
-
Target
ed8f0e4b100cd67aa276acb6a1e0324ef1914611fec20de61bfc5a33c6694984
-
Size
181KB
-
MD5
9b581bcfa2a7a3cdebc12007e7e806dd
-
SHA1
ee160a89f1cba09cf0f8dc5b2abc786af7221874
-
SHA256
ed8f0e4b100cd67aa276acb6a1e0324ef1914611fec20de61bfc5a33c6694984
-
SHA512
662470d4a0eba30e989bf174432fffc1474036c35850413ed2b828078068b89ace1acaabb3f8cd3016707cf46f83d2ae133617040ac7be94d65ffdef2f5e2157
-
SSDEEP
3072:MyagF3Py1bhDNYmRMCLqBzNqEL9Xv3tHyF5kepWUzxMH97lK7:/aq3Py1xN5MqAzvL9/tEie8UzxM7lK
Malware Config
Signatures
Files
-
ed8f0e4b100cd67aa276acb6a1e0324ef1914611fec20de61bfc5a33c6694984.exe windows x86
8b4eff69444ca3abe3b3780c89369f27
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
kernel32
GetVersionExA
ExitProcess
SetLastError
WaitForSingleObject
GetModuleHandleW
HeapSetInformation
GlobalFree
DeleteCriticalSection
GetTickCount
MultiByteToWideChar
user32
MoveWindow
InvalidateRect
ShowWindow
DestroyWindow
DefWindowProcA
LoadStringA
LoadStringW
GetWindowRect
CreateDialogParamA
GetDesktopWindow
MessageBoxA
GetActiveWindow
wsprintfA
SetFocus
GetDlgItem
SetWindowLongA
LoadImageA
DialogBoxParamA
GetWindowLongA
SendDlgItemMessageA
EndDialog
gdi32
DeleteObject
advapi32
RegCreateKeyA
RegCloseKey
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
gdiplus
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
ole32
CoFreeUnusedLibraries
CoSetProxyBlanket
ReadClassStg
CoTaskMemAlloc
CreateStreamOnHGlobal
StringFromGUID2
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
Sections
.text Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 302B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ