Static task
static1
Behavioral task
behavioral1
Sample
675a63925c2c7d483f60093c8c7f5e0ff53b47135ca373e41be7f0f975d5fc6c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
675a63925c2c7d483f60093c8c7f5e0ff53b47135ca373e41be7f0f975d5fc6c.exe
Resource
win10v2004-20220901-en
General
-
Target
675a63925c2c7d483f60093c8c7f5e0ff53b47135ca373e41be7f0f975d5fc6c
-
Size
104KB
-
MD5
585cce58375236e7d7110e7505217d59
-
SHA1
29e581fcd4d25649e72f54448211f1b43dffe964
-
SHA256
675a63925c2c7d483f60093c8c7f5e0ff53b47135ca373e41be7f0f975d5fc6c
-
SHA512
a067ac3f96e941e096a49ec919b4dc246f90393b308285a084accdf728eeb1b2655d60d5d48c762c17e9ee85edd9fb0d5cc7650fd2d2c31ede30cf727e92906e
-
SSDEEP
1536:aR4/+qHR+doTvoBdKP8QI2qfAHBR9CKcUquRgO5iSz0fc46xrd:ayzx+doTvkdTQtgAnrPgOkSmcTd
Malware Config
Signatures
Files
-
675a63925c2c7d483f60093c8c7f5e0ff53b47135ca373e41be7f0f975d5fc6c.exe windows x86
3ede0254478c89bc488dfe877d1b3d81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterWindowMessageA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
RegisterClassExA
KillTimer
PostQuitMessage
DefWindowProcA
SetTimer
DestroyWindow
CreateWindowExA
LoadCursorA
advapi32
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
shell32
ShellExecuteExA
kernel32
ExitProcess
HeapDestroy
GetVersionExA
SetEnvironmentVariableA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
ReleaseMutex
GetLastError
CreateMutexA
CloseHandle
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
WriteFile
GetModuleFileNameA
GetEnvironmentVariableA
RtlUnwind
UnhandledExceptionFilter
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
GetEnvironmentStrings
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ