Static task
static1
Behavioral task
behavioral1
Sample
7afea0305442daea5461f1e8086a7cb168ddcb88bb97c427693f56a4b02328d2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7afea0305442daea5461f1e8086a7cb168ddcb88bb97c427693f56a4b02328d2.exe
Resource
win10v2004-20220901-en
General
-
Target
7afea0305442daea5461f1e8086a7cb168ddcb88bb97c427693f56a4b02328d2
-
Size
14KB
-
MD5
ef158c2644399f3c3e06b6e9d4c5f808
-
SHA1
22433d66957c8250ed1ba0dc1b2895086dde9555
-
SHA256
7afea0305442daea5461f1e8086a7cb168ddcb88bb97c427693f56a4b02328d2
-
SHA512
9291a9ec6ee42b1a0ef6daf367f53ddbb1cb95172fa0892875300eff03e3c91c50ac81c866318e06b8d2719d2cfae84203c98d3c50461dacb3f79d49d00af582
-
SSDEEP
192:0zVF+V1D6Ps1xp+Eg/f99hX1rq8D/pYk6tqovwz1R:EF+zDws9+ZdrqcYkUqiWR
Malware Config
Signatures
Files
-
7afea0305442daea5461f1e8086a7cb168ddcb88bb97c427693f56a4b02328d2.exe windows x86
9eba862f82afd8db96ba29086b6e96ac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
wininet
HttpQueryInfoA
InternetOpenA
InternetOpenUrlA
InternetReadFile
advapi32
RegOpenKeyExA
RegQueryValueExA
kernel32
CloseHandle
CreateFileMappingA
CreateProcessA
CreateThread
ExitProcess
FindResourceA
FormatMessageA
GetCurrentProcessId
GetLastError
GetModuleHandleA
GetProcessHeap
GetStartupInfoA
GetTempPathA
HeapFree
LoadLibraryA
LoadResource
LockResource
MapViewOfFile
OpenProcess
SizeofResource
Sleep
UnmapViewOfFile
WaitForSingleObject
_lclose
_lcreat
_lwrite
lstrcatA
lstrcpyA
lstrcpynA
lstrlenA
comctl32
InitCommonControls
user32
DialogBoxParamA
EndDialog
GetDlgItem
LoadStringA
MessageBeep
MessageBoxA
PostMessageA
SendDlgItemMessageA
SetDlgItemTextA
SetForegroundWindow
SetWindowTextA
ShowWindow
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ