Static task
static1
Behavioral task
behavioral1
Sample
7da5ae9465842c533d1f6800870707f3d09826d143737a5a6a12424cc92d0124.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7da5ae9465842c533d1f6800870707f3d09826d143737a5a6a12424cc92d0124.exe
Resource
win10v2004-20220812-en
General
-
Target
7da5ae9465842c533d1f6800870707f3d09826d143737a5a6a12424cc92d0124
-
Size
198KB
-
MD5
055a029bf3bc6fa1f042aa6e1965e280
-
SHA1
4429538d6eef8c6daf06ccb27ee7563886de675c
-
SHA256
7da5ae9465842c533d1f6800870707f3d09826d143737a5a6a12424cc92d0124
-
SHA512
df035146d44cc43925f04d2eefb2cc3b4dbdf80b9b34e4da9eb7c1a44e58f3ee8aa58e77ce4f4cf1e6a437aeea1610ec6b3dc6c44335304b2195d9f145dd865c
-
SSDEEP
3072:xUg/oz5bT/9cUYddOgTGdh7f1nR7k1Ej8o9HlnKgKZoULsj2vaGMbM8RvsnF:UPF4dDT87f1RY+tlKiWryMqsF
Malware Config
Signatures
Files
-
7da5ae9465842c533d1f6800870707f3d09826d143737a5a6a12424cc92d0124.exe windows x86
f785bbd0917f15ea9ffc465c679c09c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetObjectA
GetStockObject
kernel32
VirtualProtectEx
GetLocaleInfoA
GetCurrentDirectoryA
MoveFileA
lstrcmpiA
GetCommandLineA
lstrlenA
lstrcatA
DeviceIoControl
InterlockedCompareExchange
SetThreadLocale
msvcrt
_except_handler3
clock
_mbscmp
_controlfp
_fileno
cos
_exit
asin
_initterm
getenv
__getmainargs
_XcptFilter
_adjust_fdiv
log
__p___initenv
__setusermatherr
_umask
towupper
advapi32
RegCreateKeyExA
RegEnumValueA
CryptReleaseContext
AddAccessAllowedAce
RegCreateKeyExW
AdjustTokenPrivileges
InitializeSecurityDescriptor
RegEnumKeyA
EqualSid
user32
ScrollWindow
DrawIconEx
MessageBoxA
SetScrollRange
RegisterWindowMessageA
GetMenuStringA
WindowFromPoint
EnumThreadWindows
PostQuitMessage
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 148KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ