Static task
static1
Behavioral task
behavioral1
Sample
af9773179273069b24b8aeba8282fd382555237e2efab1252f4539c0bc3a350d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af9773179273069b24b8aeba8282fd382555237e2efab1252f4539c0bc3a350d.exe
Resource
win10v2004-20220812-en
General
-
Target
af9773179273069b24b8aeba8282fd382555237e2efab1252f4539c0bc3a350d
-
Size
277KB
-
MD5
ec5c63e5a8d70da5fb8393b5c7c817d4
-
SHA1
dfec5cfe2f969b8a3be247941eb2a22875f31fe2
-
SHA256
af9773179273069b24b8aeba8282fd382555237e2efab1252f4539c0bc3a350d
-
SHA512
85522fccf3c8f67ed6cf29a31965de99771ea6166578286681ebd6e7dce826873ce5b221762b3a463ca7aad05d90c1e0fcc42418450eb9706eacd34bd5db778e
-
SSDEEP
6144:Y+OPjYUQQ04xkUPnNwPrOMCsE+x+ozXme4B5fqBD9:aYUI4Wrko/upqD
Malware Config
Signatures
Files
-
af9773179273069b24b8aeba8282fd382555237e2efab1252f4539c0bc3a350d.exe windows x86
a4b4d5e79cb6b6826c66239e207b1934
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareStringA
CreateEventA
CreateProcessA
CreateThread
EnterCriticalSection
ExitThread
GetLastError
GetPrivateProfileStringA
GetTickCount
GlobalAlloc
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalLock
MoveFileW
MulDiv
SetEvent
Sleep
WaitForSingleObject
WriteConsoleA
lstrcatA
lstrcmpA
lstrcmpiA
lstrlenA
user32
wsprintfA
CharNextA
CreatePopupMenu
CreateWindowExW
DispatchMessageW
GetAsyncKeyState
GetMenuItemID
GetMenuItemInfoW
InsertMenuW
ShowWindow
UnregisterHotKey
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 262KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ