Static task
static1
Behavioral task
behavioral1
Sample
c91e7d6a62690fe1d4658926f718a9996a0a4158066bdf1be5b576e5d1a0e56b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c91e7d6a62690fe1d4658926f718a9996a0a4158066bdf1be5b576e5d1a0e56b.exe
Resource
win10v2004-20221111-en
General
-
Target
c91e7d6a62690fe1d4658926f718a9996a0a4158066bdf1be5b576e5d1a0e56b
-
Size
605KB
-
MD5
a28feafa85bee879d5bb694c3541a261
-
SHA1
6ba4fa9abe0871ed5d1c3bf6b57d8d93e80c3d71
-
SHA256
c91e7d6a62690fe1d4658926f718a9996a0a4158066bdf1be5b576e5d1a0e56b
-
SHA512
2a5a554d1fbccf35e5c114c07ff15daaecab4be9448b0fafee831b57be47f82801b4fd36b7f71a24c5a3a97ee7d42fa74cc1d46db7aaa56d8d03716e64963e54
-
SSDEEP
12288:f1JxNmGASLIxwRrpa2AyhC8nFjKtOfvFKUQ2oFnkszfbj5:hNNyqeWoiMG9mnlfb9
Malware Config
Signatures
Files
-
c91e7d6a62690fe1d4658926f718a9996a0a4158066bdf1be5b576e5d1a0e56b.exe windows x86
edb55bc737c7a0bda255cb1cf9733ebc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetActiveWindow
EnumChildWindows
SetWindowLongW
SetWindowTextA
ValidateRect
IsCharAlphaW
GetDesktopWindow
DialogBoxParamA
IsCharLowerA
MoveWindow
ole32
CoRevokeClassObject
CoEnableCallCancellation
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
kernel32
HeapFree
SizeofResource
SetFileAttributesA
HeapDestroy
LoadResource
GetTimeZoneInformation
LocalAlloc
HeapCreate
SuspendThread
IsBadStringPtrW
FindResourceExA
GetTickCount
GetDateFormatA
GetProcAddress
FreeLibrary
LoadLibraryA
DeleteCriticalSection
InitializeCriticalSection
LocalFree
Sections
.text Size: 589KB - Virtual size: 589KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ