Static task
static1
Behavioral task
behavioral1
Sample
a671e9608a91b4bb1f60a89de7de5e5a48f20c5a679d87a3d75fe2fc7c0307e9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a671e9608a91b4bb1f60a89de7de5e5a48f20c5a679d87a3d75fe2fc7c0307e9.exe
Resource
win10v2004-20220812-en
General
-
Target
a671e9608a91b4bb1f60a89de7de5e5a48f20c5a679d87a3d75fe2fc7c0307e9
-
Size
20KB
-
MD5
66a29919c11f62069fe03f1bd881a413
-
SHA1
c6373a22b9df2a3c54b765c90b723103442f8846
-
SHA256
a671e9608a91b4bb1f60a89de7de5e5a48f20c5a679d87a3d75fe2fc7c0307e9
-
SHA512
cbd49614d75e7c7782ad0def44c24d69e30d7a958ae11e41bce13d19761a7322ccfc581d3ec2c7eb6e9e0f19b204ceb1a15b1f42d59801fc23a54e5043df6fd3
-
SSDEEP
384:DReQuAbtrGLqqE903UI+e7UTw6AlT+WymHD5rMg/d/:D4vAZEqqe0kXe7UTyiWyUrV
Malware Config
Signatures
Files
-
a671e9608a91b4bb1f60a89de7de5e5a48f20c5a679d87a3d75fe2fc7c0307e9.exe windows x86
76bb3bb259196714ebce5496dac223cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
IsDebuggerPresent
GetModuleFileNameA
VirtualAlloc
GetThreadPriority
FreeLibrary
GetCurrentProcessId
GetProcessTimes
GetDriveTypeA
GetCurrentThread
GetCurrentProcess
TlsAlloc
IsValidCodePage
ExitThread
Sleep
GetCurrentThreadId
CloseHandle
GetStartupInfoA
GetCommandLineA
GetLogicalDrives
user32
ShowWindow
GetWindowTextLengthA
GetForegroundWindow
GetWindowDC
IsWindowVisible
GetClassLongA
BeginPaint
UpdateWindow
GetActiveWindow
GetDC
GetWindowLongA
ReleaseDC
CreateWindowExA
GetFocus
RegisterClassA
GetSystemMetrics
OpenIcon
GetWindow
GetWindowTextA
advapi32
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
IsTextUnicode
GetUserNameA
version
VerQueryValueA
GetFileVersionInfoA
VerLanguageNameA
GetFileVersionInfoSizeA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ