Static task
static1
Behavioral task
behavioral1
Sample
70fdec1d925e8e4653bc88dc2b36d2ad79fef03587dfd5c15975a6fa1055c641.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
70fdec1d925e8e4653bc88dc2b36d2ad79fef03587dfd5c15975a6fa1055c641.exe
Resource
win10v2004-20220901-en
General
-
Target
70fdec1d925e8e4653bc88dc2b36d2ad79fef03587dfd5c15975a6fa1055c641
-
Size
18KB
-
MD5
b2c597e17c58c1840456c7f7b491ea90
-
SHA1
653010bc008d83294b1d8787fc23867d3df8b93f
-
SHA256
70fdec1d925e8e4653bc88dc2b36d2ad79fef03587dfd5c15975a6fa1055c641
-
SHA512
19bc163e7f3684ecb9f991d898e783b388f7bc09f403273851d1df6eef93eda323ea9db7d7c652484d367106955099445a9a2cfcb0daa580f9200c6c66943b72
-
SSDEEP
192:hEy+LdiTpB9RILRKFHTDGOmCgdsLNotJ+UKTgt067G1A4S0AZ7+5LP+QxrSQpN:tkiTpBjc+XGO3hIQQ067GBS0MaSQpvX
Malware Config
Signatures
Files
-
70fdec1d925e8e4653bc88dc2b36d2ad79fef03587dfd5c15975a6fa1055c641.exe windows x86
e36bd4198019129d754cda4c0a4b171a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
TranslateMessage
ShowWindow
SetTimer
PostQuitMessage
LoadImageA
KillTimer
GetClientRect
EndPaint
DispatchMessageA
DefWindowProcA
BeginPaint
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
gdi32
CreateCompatibleDC
DeleteDC
GetObjectA
BitBlt
kernel32
ExitProcess
GetCommandLineA
GetCurrentThreadId
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sleep
CreateThread
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 824B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 234B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ