Static task
static1
Behavioral task
behavioral1
Sample
a634d55ad438f6dcc8e9a6dedeafb40beac24e73cea08a3680da0bf207ae63a9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a634d55ad438f6dcc8e9a6dedeafb40beac24e73cea08a3680da0bf207ae63a9.exe
Resource
win10v2004-20220812-en
General
-
Target
a634d55ad438f6dcc8e9a6dedeafb40beac24e73cea08a3680da0bf207ae63a9
-
Size
108KB
-
MD5
4f0aecc18c5565ba534bde17ca30856d
-
SHA1
c066c0b2c9b6760ee801f76a733f96a0aba3fcd9
-
SHA256
a634d55ad438f6dcc8e9a6dedeafb40beac24e73cea08a3680da0bf207ae63a9
-
SHA512
77ab02247fd856ef2aa89dfac858d92a4a5b9353fa7c1bebfde88b8270f9fc9fb245e31695ea60d44fce81e01390c21a79f6ef66ca0b8c0b7fb9a4eecc121cf4
-
SSDEEP
3072:D7fKi4j+eYwSYYYYYYYGK+Bvvyf6BzPZTByuAw5jKE/o:D7fKip8AKAiiP9Kw5jW
Malware Config
Signatures
Files
-
a634d55ad438f6dcc8e9a6dedeafb40beac24e73cea08a3680da0bf207ae63a9.exe windows x86
132896910b6bc0f28743d1673e645878
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
SetLastError
TlsGetValue
GetProcessHeap
lstrlenW
GetEnvironmentVariableA
FindResourceA
CreateMutexA
TlsAlloc
DeleteAtom
GetExitCodeProcess
GetCurrentThreadId
ReleaseMutex
CloseHandle
HeapCreate
LoadLibraryExA
GlobalUnlock
GetStdHandle
GlobalFree
CreateFileA
user32
CheckRadioButton
CreateWindowExA
SetFocus
CreateMenu
DrawEdge
DispatchMessageA
IsWindow
GetCaretPos
GetDlgItem
FillRect
DrawMenuBar
GetDC
CallWindowProcA
rsaenh
CPSignHash
CPGenKey
CPDeriveKey
CPDecrypt
CPHashData
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sddlqnv Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE