Static task
static1
Behavioral task
behavioral1
Sample
96c174939ffaf95581b81d1a534d0ddc79b08a38c6fe1bf773a4b89d8081135a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
96c174939ffaf95581b81d1a534d0ddc79b08a38c6fe1bf773a4b89d8081135a.exe
Resource
win10v2004-20221111-en
General
-
Target
96c174939ffaf95581b81d1a534d0ddc79b08a38c6fe1bf773a4b89d8081135a
-
Size
35KB
-
MD5
f50d7ff664de7fc7b52450a0f22a7ade
-
SHA1
4826cec521850f4e1b410900ea79b17f2f0da120
-
SHA256
96c174939ffaf95581b81d1a534d0ddc79b08a38c6fe1bf773a4b89d8081135a
-
SHA512
6f7e79f3b8510e08c98ef865a8ad50c50713d309baf09a6bb614173bf3d6c3cc169f053b24c3aa5d745ab7a128c1b45f3b444dd6e25249d890dfc614ff991c2e
-
SSDEEP
768:CKZQ4b9XUasfHymVa7k2D39/Q7B2afZf3G0KQS32u:d/iHymo7k2O2aVGUy5
Malware Config
Signatures
Files
-
96c174939ffaf95581b81d1a534d0ddc79b08a38c6fe1bf773a4b89d8081135a.exe windows x86
7887e9e05484689d73cc1df4f0e1473d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
ShowWindow
RegisterClassExA
PostQuitMessage
LoadImageA
UpdateWindow
LoadCursorA
KillTimer
GetMessageA
GetClientRect
EndPaint
DispatchMessageA
LoadIconA
DefWindowProcA
CreateWindowExA
BeginPaint
gdi32
GetObjectA
DeleteDC
CreateCompatibleDC
BitBlt
kernel32
Sleep
OpenProcess
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
VirtualAlloc
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CreateThread
GetCommandLineA
shlwapi
StrStrIA
psapi
GetModuleFileNameExA
EnumProcessModules
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 709B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 226B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ