Static task
static1
Behavioral task
behavioral1
Sample
7d70595a7a11e6fb397ec8e69fbd018d2f5bd994bb9306870563fc1a8472d35a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7d70595a7a11e6fb397ec8e69fbd018d2f5bd994bb9306870563fc1a8472d35a.exe
Resource
win10v2004-20221111-en
General
-
Target
7d70595a7a11e6fb397ec8e69fbd018d2f5bd994bb9306870563fc1a8472d35a
-
Size
119KB
-
MD5
1865112f0b43143bc04c3b3582f55810
-
SHA1
00542d88283d4102a51fedca75b2d7000e623095
-
SHA256
7d70595a7a11e6fb397ec8e69fbd018d2f5bd994bb9306870563fc1a8472d35a
-
SHA512
ee0ee2cc88dfbee8873a73d1c50e287c5122edbc916941ccafee367303ebbf561823a26450ffbe09102ff00b16d20a8ce638b80f789701e26533c02dd8404368
-
SSDEEP
1536:QaD57p1sSCpsWVmDq1/yBPvpxWDXTxJml+0c9TWQfiIh5PTwp9hSEinmXwuDTd1L:Q/SwVcq9OvTWX/aIfwbLYETXSY
Malware Config
Signatures
Files
-
7d70595a7a11e6fb397ec8e69fbd018d2f5bd994bb9306870563fc1a8472d35a.exe windows x86
3d71ccb14ebf2e779ba9bdd10bb716fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileTime
GetDriveTypeA
HeapCreate
WriteFile
TlsGetValue
GetEnvironmentVariableW
FindClose
CreateEventW
ReleaseMutex
InitializeCriticalSection
GetCurrentProcessId
lstrlenW
GetPrivateProfileStringA
GetCurrentThreadId
FindAtomA
GlobalFlags
LocalFree
ReleaseMutex
IsBadStringPtrW
LoadLibraryW
user32
CallWindowProcW
CreateWindowExA
DrawStateW
IsWindow
EndDialog
GetSysColor
DispatchMessageA
DrawTextA
GetSysColor
GetClassInfoA
SetFocus
GetClientRect
GetKeyboardType
rastapi
DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone
clbcatq
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 109KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zhztlho Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE