Static task
static1
Behavioral task
behavioral1
Sample
3850c76455755fbc1d54fb90a1c62fa3ac27bd012a3d6edce83c997311443eb5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3850c76455755fbc1d54fb90a1c62fa3ac27bd012a3d6edce83c997311443eb5.exe
Resource
win10v2004-20221111-en
General
-
Target
3850c76455755fbc1d54fb90a1c62fa3ac27bd012a3d6edce83c997311443eb5
-
Size
165KB
-
MD5
15689de703a3479d7c49feafd4eb8020
-
SHA1
fa1c3f10146b51af65cc00fc39e01c751dcc4665
-
SHA256
3850c76455755fbc1d54fb90a1c62fa3ac27bd012a3d6edce83c997311443eb5
-
SHA512
dde03f8244f1c13b166ebad454858d936976b5f12732812c6c38405e2b7843475f1afb96363eda428dcf4984459564ed6f1175f07cf6590227caefd1cb1dfaff
-
SSDEEP
3072:MBS3yNSSF7tyL7ksqKgFaL8sgh6jnrtnWMnT9wiar+ZY1:MBSUSaty8jKL8Gn9/Siar+ZC
Malware Config
Signatures
Files
-
3850c76455755fbc1d54fb90a1c62fa3ac27bd012a3d6edce83c997311443eb5.exe windows x86
6ce417082afe6567d8ff1815e8f346c6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
ExitProcess
LCMapStringA
CloseHandle
CreateFileA
user32
CreateWindowExA
CharLowerBuffA
SetWindowLongA
wsprintfA
CloseWindow
advapi32
RegEnumKeyA
RegCreateKeyA
RegOpenKeyA
RegSetValueA
RegDeleteValueA
RegEnumValueA
RegDeleteKeyA
RegCloseKey
RegQueryValueA
Sections
.text Size: 144KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ