Static task
static1
Behavioral task
behavioral1
Sample
942b377f64fe5926f7f9f963a19e83f204c7c4fee6c953ab42a19936dc509a4d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
942b377f64fe5926f7f9f963a19e83f204c7c4fee6c953ab42a19936dc509a4d.exe
Resource
win10v2004-20220901-en
General
-
Target
942b377f64fe5926f7f9f963a19e83f204c7c4fee6c953ab42a19936dc509a4d
-
Size
14KB
-
MD5
15ec706e800dc37888fba6976a08ab4b
-
SHA1
6867fc264dabbf76ef714923be09fcc122898190
-
SHA256
942b377f64fe5926f7f9f963a19e83f204c7c4fee6c953ab42a19936dc509a4d
-
SHA512
c037e863484bdd01024604b69a229be206f13178cbb76bae6e42cd387c2687550ae9088e7737893aad0766d9b661150d62fb8e2bbef7fa50ff7d1b3e55d8d95f
-
SSDEEP
192:LxOKBJyAhK6qiVljxhe3E32N5PjkEcydFfa/Ryvvxi2dW9l:LsvsrqkruEGN57kEZdaMvxOT
Malware Config
Signatures
Files
-
942b377f64fe5926f7f9f963a19e83f204c7c4fee6c953ab42a19936dc509a4d.exe windows x86
bedfe471d2ea2aec33bd7d1f2cf32fee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
VirtualAlloc
TlsSetValue
GetModuleFileNameA
TlsGetValue
GetCommandLineA
GetDriveTypeW
GetACP
GetOEMCP
TlsFree
GetUserDefaultLCID
IsDBCSLeadByte
GetCurrentThread
FreeLibrary
GetSystemDefaultLCID
GetLogicalDrives
lstrcpyA
CreateProcessInternalW
lstrcatA
GetCurrentProcessId
GetModuleHandleW
user32
GetWindowTextLengthA
IsIconic
ShowWindow
GetWindowTextA
GetFocus
GetSystemMetrics
ReleaseDC
GetForegroundWindow
GetWindowLongA
RegisterClassA
IsWindowVisible
GetClassInfoExA
GetActiveWindow
GetWindowDC
GetDC
GetWindow
ValidateRect
CloseWindow
UpdateWindow
imagehlp
ImageLoad
CheckSumMappedFile
BindImage
FindFileInPath
FindDebugInfoFile
ImageNtHeader
oleacc
LresultFromObject
GetStateTextA
GetRoleTextA
DllRegisterServer
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ