Static task
static1
Behavioral task
behavioral1
Sample
1729ce9da27ffbc18df177d0b7fcca84255519e258d990d0997e15acd7192c34.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1729ce9da27ffbc18df177d0b7fcca84255519e258d990d0997e15acd7192c34.exe
Resource
win10v2004-20220901-en
General
-
Target
1729ce9da27ffbc18df177d0b7fcca84255519e258d990d0997e15acd7192c34
-
Size
128KB
-
MD5
9bb41ba03e8c26d1cf6b20375e51dac0
-
SHA1
8bc492f9f6ce652472ae1486e14387ff74647a31
-
SHA256
1729ce9da27ffbc18df177d0b7fcca84255519e258d990d0997e15acd7192c34
-
SHA512
698d94b88a9d00de4342299dc38a570a794a6b8b56c8d140c71d9e9b894d79b3f48c61d55e8e2800486e5bca6f8cd59a20ef8e8a31a18132cc35496ec9fd0e6d
-
SSDEEP
3072:DIOrhD6H2QMjLaEL+d8AF7FFN4spo2gKaIOrhD6H2QMjLaEL+d8w:h6H8LaE6Kg7F9UL6H8LaE6Kw
Malware Config
Signatures
Files
-
1729ce9da27ffbc18df177d0b7fcca84255519e258d990d0997e15acd7192c34.exe windows x86
777ffcacda06e11650f9ecfa34a590bc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
SetErrorMode
GetProcAddress
GetVersion
TlsGetValue
GetDefaultCommConfigA
CreateFileW
lstrcmpiA
GetModuleHandleW
TlsSetValue
LoadLibraryA
VirtualFree
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualProtect
VirtualAlloc
GetCommandLineA
GetCommandLineW
ExitProcess
HeapAlloc
GetStringTypeW
GetOEMCP
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
user32
LoadStringA
GetSystemMetrics
EndDialog
GetClientRect
DialogBoxParamA
gdi32
CreateBitmap
advapi32
RegCloseKey
ole32
CoUninitialize
CoTaskMemAlloc
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ