Static task
static1
Behavioral task
behavioral1
Sample
0c69b80e9a44856a250cff5dc8532056468d3a03cb100b682256d59f413c8826.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0c69b80e9a44856a250cff5dc8532056468d3a03cb100b682256d59f413c8826.exe
Resource
win10v2004-20220812-en
General
-
Target
0c69b80e9a44856a250cff5dc8532056468d3a03cb100b682256d59f413c8826
-
Size
23KB
-
MD5
8fe65f79c6b26292e8150f22fdcb4aa6
-
SHA1
ebd96e0f945a8308e3a7d4003275b0cd0c4682c9
-
SHA256
0c69b80e9a44856a250cff5dc8532056468d3a03cb100b682256d59f413c8826
-
SHA512
a9f67ada254e6589709cce47037615219da058bcd793b081bc18c891cc105c1e26e39d3689fe9251ddc483ea5f5b8871f96a1375d434d0f1acdcebb66f93df03
-
SSDEEP
384:zkiT+GLeha5JuD35KbcF3qCoBf1W/ebsD5mYOyZR:zn3CKbIoBf1WGbsD5DH
Malware Config
Signatures
Files
-
0c69b80e9a44856a250cff5dc8532056468d3a03cb100b682256d59f413c8826.exe windows x86
e36bd4198019129d754cda4c0a4b171a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
TranslateMessage
ShowWindow
SetTimer
PostQuitMessage
LoadImageA
KillTimer
GetClientRect
EndPaint
DispatchMessageA
DefWindowProcA
BeginPaint
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
gdi32
CreateCompatibleDC
DeleteDC
GetObjectA
BitBlt
kernel32
ExitProcess
GetCommandLineA
GetCurrentThreadId
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sleep
CreateThread
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 234B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ