Static task
static1
Behavioral task
behavioral1
Sample
2f86865d3040350f2e0154c323f83a3d0820ebd4c60e80c3d8cdd086e321ff9c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2f86865d3040350f2e0154c323f83a3d0820ebd4c60e80c3d8cdd086e321ff9c.exe
Resource
win10v2004-20220812-en
General
-
Target
2f86865d3040350f2e0154c323f83a3d0820ebd4c60e80c3d8cdd086e321ff9c
-
Size
224KB
-
MD5
5b81eb767947505a110d690da5ebabb0
-
SHA1
8e901e3120659fa9189e9c8eda1004ca4ffb7565
-
SHA256
2f86865d3040350f2e0154c323f83a3d0820ebd4c60e80c3d8cdd086e321ff9c
-
SHA512
aaec33b967ffe75c0f1574ff6fbdd3fcc120448d6a51b774976e9ad00adfa41688d28685ccabfafe1c0c3dc3b9eb097b2c645c5041e3d89f69651cf6b9c606e6
-
SSDEEP
6144:qyRD2Rt16De3m29CTd42x3kxqXU2qhqX7Ja9F:HRD2tQe3m2UTXKyU9F
Malware Config
Signatures
Files
-
2f86865d3040350f2e0154c323f83a3d0820ebd4c60e80c3d8cdd086e321ff9c.exe windows x86
28fb42d4a75a5d6238acb8d39b9c116e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
ExitProcess
LCMapStringA
CloseHandle
CreateFileA
user32
wsprintfA
CloseWindow
CreateWindowExA
SetWindowLongA
CharLowerBuffA
advapi32
RegCloseKey
RegDeleteKeyA
RegSetValueA
RegDeleteValueA
RegEnumValueA
RegOpenKeyA
RegCreateKeyA
RegEnumKeyA
RegQueryValueA
Sections
.text Size: 200KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ