Static task
static1
Behavioral task
behavioral1
Sample
af8b0bef1dddd7bcb368eba7d716732cff80cffa3176bb67f51c17d94e14264b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af8b0bef1dddd7bcb368eba7d716732cff80cffa3176bb67f51c17d94e14264b.exe
Resource
win10v2004-20220812-en
General
-
Target
af8b0bef1dddd7bcb368eba7d716732cff80cffa3176bb67f51c17d94e14264b
-
Size
159KB
-
MD5
cd18d9fab884e107d992f1afa707f9d8
-
SHA1
5da6ebca97d5708c63d488b256b7d52b01641c29
-
SHA256
af8b0bef1dddd7bcb368eba7d716732cff80cffa3176bb67f51c17d94e14264b
-
SHA512
031efff57efde7a67c85d6cb9241f1b9e5c972d1d7b61dde173f6ce2c05d382e32a46425c4771e9f0b1e4c082515f80862e595416358c7f318fe93a6b5ab0a11
-
SSDEEP
3072:yW3qcSCL3LlPOGn4fyxoJI8d7M9HPwvt0SatJIYmMA2E5PrIYjIf:yeqI1HnEd9SAtfatXas
Malware Config
Signatures
Files
-
af8b0bef1dddd7bcb368eba7d716732cff80cffa3176bb67f51c17d94e14264b.exe windows x86
2aa9aefbfaa535eb35e671637c3e72c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shlwapi
SHDeleteEmptyKeyW
ord195
AssocQueryStringA
SHDeleteKeyW
PathRemoveBackslashW
ole32
CLSIDFromProgID
CoInitialize
kernel32
GetVersionExW
GetVersionExA
WideCharToMultiByte
GetCommandLineA
GetModuleHandleA
GetEnvironmentVariableW
OutputDebugStringW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GlobalFree
WaitForMultipleObjects
CreateEventA
GetCurrentProcess
GetVolumeInformationA
GetDriveTypeW
VirtualAlloc
VirtualFree
CreateFileW
ReadFile
WriteFile
GetCurrentProcessId
GetModuleFileNameW
GetSystemTime
GetStdHandle
user32
MessageBeep
GetWindowLongA
SendMessageA
GetDlgItem
MessageBoxW
gdiplus
GdiplusShutdown
GdiplusStartup
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegEnumValueA
RegDeleteValueA
RegCloseKey
Sections
.text Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 238B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ