Static task
static1
Behavioral task
behavioral1
Sample
142171eeb0476e7a8e8a9c6a13b7f678a2ee6f77781bafe572f70b7dd45b55e9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
142171eeb0476e7a8e8a9c6a13b7f678a2ee6f77781bafe572f70b7dd45b55e9.exe
Resource
win10v2004-20220812-en
General
-
Target
142171eeb0476e7a8e8a9c6a13b7f678a2ee6f77781bafe572f70b7dd45b55e9
-
Size
88KB
-
MD5
56256df85d621090f8977d15bf663474
-
SHA1
8f61289fae9f97be93e8e00a9c76909c294eb01f
-
SHA256
142171eeb0476e7a8e8a9c6a13b7f678a2ee6f77781bafe572f70b7dd45b55e9
-
SHA512
a44fbfdaefb7f52eca7cb228158995f1e5071b393887831f3e7347fe70f174079b59af9ba9eb857637a09f3978cef0aee507bce8d5abb76b468728a8224f0d3e
-
SSDEEP
1536:s0eAwfyox+2zf3FBHFZH9pay0zCBjStp5eu4XmsD4bLW/SU1b:PgztBltWy0+B+V4XmtLWb
Malware Config
Signatures
Files
-
142171eeb0476e7a8e8a9c6a13b7f678a2ee6f77781bafe572f70b7dd45b55e9.exe windows x86
6c6f137a55d72a9847821ecdc6d7642e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileMappingA
DeleteCriticalSection
ExitProcess
FindClose
GetACP
GetCommandLineA
GetConsoleCP
GetLastError
GetModuleHandleA
GetOEMCP
GetProcessAffinityMask
GetStartupInfoA
GetVersionExA
HeapAlloc
HeapCreate
HeapReAlloc
HeapSize
InitializeCriticalSection
IsBadStringPtrA
LocalFree
MultiByteToWideChar
PulseEvent
ResumeThread
RtlUnwind
SetLastError
SetPriorityClass
SetUnhandledExceptionFilter
VirtualFree
WaitForMultipleObjects
user32
SendMessageTimeoutA
DrawMenuBar
GetCursorPos
SetDlgItemTextA
DrawFrameControl
InsertMenuA
winmm
waveOutGetNumDevs
joyGetDevCapsW
ole32
CoCreateInstance
CoBuildVersion
advapi32
CopySid
RegRestoreKeyW
RegisterTraceGuidsA
CryptEnumProviderTypesW
RegOverridePredefKey
GetCurrentHwProfileW
shlwapi
StrStrIA
SHRegGetPathA
shfolder
SHGetFolderPathA
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ