Static task
static1
Behavioral task
behavioral1
Sample
734882c5d9d503977422551ed7331c2d8c33e23d3fd502bf0b73b44d7ca46677.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
734882c5d9d503977422551ed7331c2d8c33e23d3fd502bf0b73b44d7ca46677.exe
Resource
win10v2004-20220812-en
General
-
Target
734882c5d9d503977422551ed7331c2d8c33e23d3fd502bf0b73b44d7ca46677
-
Size
180KB
-
MD5
6759ec4f0ae3db47b83ee58caf07a59d
-
SHA1
9bdddc74667cf55e0a36637149fd55bbecd97b20
-
SHA256
734882c5d9d503977422551ed7331c2d8c33e23d3fd502bf0b73b44d7ca46677
-
SHA512
770c279e6f026b742660342d2a0c5c030130b5cba298f13045165e0509dd41b56506fd46ca907f9b8b69617c0c3f390bd16fa0e6b434a507075756be3de96bb9
-
SSDEEP
3072:MdAFu4XxRv6xQH+m/BAp2DKC7CEVZJQTdjPZnZg0rVnhQ+5zRjSIeIixsR6E/VkD:YAFu4XXvzH+Eep2DKCNeTdjpZphXRztq
Malware Config
Signatures
Files
-
734882c5d9d503977422551ed7331c2d8c33e23d3fd502bf0b73b44d7ca46677.exe windows x86
f433e6b69765348b371ae3128c8eb127
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
AppendMenuW
GetActiveWindow
IsDialogMessageW
SetWindowsHookExW
PostMessageW
DrawFrameControl
TrackPopupMenu
FillRect
dbghelp
FindFileInSearchPath
ImagehlpApiVersion
ImagehlpApiVersionEx
SearchTreeForFile
FindExecutableImage
FindExecutableImageEx
imagehlp
ReBaseImage64
MapFileAndCheckSumW
ImageUnload
ImageRemoveCertificate
ImageGetCertificateHeader
ReBaseImage
msvcrt
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_exit
_XcptFilter
kernel32
GetStartupInfoW
GetModuleHandleW
CreateEventW
WaitForSingleObject
ResetEvent
SetEvent
VerLanguageNameW
WriteConsoleW
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 786KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ