Static task
static1
Behavioral task
behavioral1
Sample
79a92991ddebb839736e6840ffa0c807f1b0fe7c7e6d03584240c2609ace1c98.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
79a92991ddebb839736e6840ffa0c807f1b0fe7c7e6d03584240c2609ace1c98.exe
Resource
win10v2004-20221111-en
General
-
Target
79a92991ddebb839736e6840ffa0c807f1b0fe7c7e6d03584240c2609ace1c98
-
Size
111KB
-
MD5
de3f4288cc4d775637b68611bb34544b
-
SHA1
79eef49bc2e1c1aecbec0c6268c286bddde38f75
-
SHA256
79a92991ddebb839736e6840ffa0c807f1b0fe7c7e6d03584240c2609ace1c98
-
SHA512
4308e0112327c44d4e98340e2a42fd25a06b3f257f72e6e2e1e7668be80215e2c921cb4f7170740a2fccd5cd17d092c532a31ace8bfe19fc4b89ef8259717ce7
-
SSDEEP
1536:7SCh/6KyxY787HqyP//N2++uMXHjMDlEcGNZpCm2r3yKlVqwjQEW8qaIj9SZH:men+/XNaYDlPYS3yKv5WraaAF
Malware Config
Signatures
Files
-
79a92991ddebb839736e6840ffa0c807f1b0fe7c7e6d03584240c2609ace1c98.exe windows x86
e304217fc16c011615a0ec22783cbfae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 48KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE