Static task
static1
Behavioral task
behavioral1
Sample
af550e8c900f152d4c930057fa7c5d4dbb23fe1259674257ae01742a3ca3025c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af550e8c900f152d4c930057fa7c5d4dbb23fe1259674257ae01742a3ca3025c.exe
Resource
win10v2004-20220812-en
General
-
Target
af550e8c900f152d4c930057fa7c5d4dbb23fe1259674257ae01742a3ca3025c
-
Size
163KB
-
MD5
b8c2fcd7523ba240a7801aae908b6874
-
SHA1
63cc0c2e9bb720f4d4717057136d787b18c6fb95
-
SHA256
af550e8c900f152d4c930057fa7c5d4dbb23fe1259674257ae01742a3ca3025c
-
SHA512
9729ae7a79b9b503f8ab8ae852706dd75095d0c14490a7611825cca3610f8a22f9e5c7bd85d5268f4c89c49f980f3760ea481cf14b5ac913477815aabe975217
-
SSDEEP
3072:pPhMZmBlvmC6mnwO062hNfSioS1zap+m3Z5VDHRxEbhvgxlU2a6dPOmsAbwy1aZ3:fzBkClwO0phJz12p+c5VDxGbCx9nDbbK
Malware Config
Signatures
Files
-
af550e8c900f152d4c930057fa7c5d4dbb23fe1259674257ae01742a3ca3025c.exe windows x86
3f39908384ebedee8e31f1099ebf6208
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
advapi32
RegQueryInfoKeyW
RegDeleteKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
shlwapi
PathCombineW
PathFileExistsW
kernel32
lstrcpyW
lstrcmpiW
FillConsoleOutputCharacterA
WideCharToMultiByte
GetProcessWorkingSetSize
GetACP
CreateFileMappingW
OutputDebugStringW
lstrcpyA
GetCPInfo
EnumResourceNamesA
FindClose
InitializeCriticalSection
LockResource
FreeEnvironmentStringsW
GetLastError
MultiByteToWideChar
GlobalFree
lstrlenW
GetTickCount
GlobalAlloc
GetModuleHandleW
user32
PostThreadMessageW
SetTimer
GetMessageW
KillTimer
TranslateMessage
CharUpperW
DispatchMessageW
GetDC
wsprintfW
CharNextW
SendMessageA
UnregisterClassA
ole32
StringFromGUID2
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoRegisterClassObject
CoCreateInstance
CoInitialize
CoRevokeClassObject
StringFromCLSID
Sections
.text Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ