Static task
static1
Behavioral task
behavioral1
Sample
8129ee38fba9134f5f330aeb0b53639b884270d475c6a0f43c5d7c33ac222048.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8129ee38fba9134f5f330aeb0b53639b884270d475c6a0f43c5d7c33ac222048.exe
Resource
win10v2004-20220901-en
General
-
Target
8129ee38fba9134f5f330aeb0b53639b884270d475c6a0f43c5d7c33ac222048
-
Size
49KB
-
MD5
41365ddd27cdc813564255b4bb8d0bcc
-
SHA1
45edb187efb4ea721179724372324141167064d0
-
SHA256
8129ee38fba9134f5f330aeb0b53639b884270d475c6a0f43c5d7c33ac222048
-
SHA512
52d9a9da2566ab80a2d5a8faa6f515de563b8fbcbdc52fc55714ce9fb5b50a4cb489646cf019f37b40065f771e9dd2c0814af55c7b88b646aa0f7fabd464796a
-
SSDEEP
768:myOnWltFiiDHHEYUfU9rlTqQEBJnsdMzgg5yGrspnqqxSkfLXuk:mVStYiDnlIETqQKJs85Xspnqcr
Malware Config
Signatures
Files
-
8129ee38fba9134f5f330aeb0b53639b884270d475c6a0f43c5d7c33ac222048.exe windows x86
2cbe715c23b99e2b42de9a5a17e8a5eb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptCreateHash
kernel32
InitializeCriticalSection
shlwapi
PathFileExistsW
PathMatchSpecW
PathRemoveFileSpecW
StrCmpNIW
StrStrW
wnsprintfA
wvnsprintfA
wvnsprintfW
user32
DispatchMessageA
EndDialog
FindWindowExA
GetCursorPos
GetDlgItemTextA
GetForegroundWindow
GetWindowThreadProcessId
MsgWaitForMultipleObjects
OpenDesktopA
SendMessageA
SetThreadDesktop
Sections
.raj Size: 38KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vut Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jyf Size: 6KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RCryptor Size: 96B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ