Static task
static1
Behavioral task
behavioral1
Sample
079a803df9a9048e686d34a9b7acef8b3a76c5b16dcbd7862413a3f70fb80b92.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
079a803df9a9048e686d34a9b7acef8b3a76c5b16dcbd7862413a3f70fb80b92.exe
Resource
win10v2004-20220812-en
General
-
Target
079a803df9a9048e686d34a9b7acef8b3a76c5b16dcbd7862413a3f70fb80b92
-
Size
22KB
-
MD5
1675d803770180d51e9f9ea30c8b4550
-
SHA1
ca1aa202402d9aeb33ba42cd3e461cd82337f226
-
SHA256
079a803df9a9048e686d34a9b7acef8b3a76c5b16dcbd7862413a3f70fb80b92
-
SHA512
e569d2daf44a745c0d41af4dc6c08ac5771cc835145e04b1a53fe4d39d107b3196e159f495b6d4c45cf84ffd9c27ab47a7321a19c208a5e34d7f7a23de459e9f
-
SSDEEP
384:RoO8IuZg8H1ZByl7DqVUMAvN7c/hpYoSpdYHkwIi9a5JyCAxvt00J3D:RoO8tZgUNVUBN7c/5mdYHkwIJyC+3D
Malware Config
Signatures
Files
-
079a803df9a9048e686d34a9b7acef8b3a76c5b16dcbd7862413a3f70fb80b92.exe windows x86
d487ba3ec3c0d2eac80a5ecee09325fe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
GetCurrentProcessId
CreateFileA
GetLocaleInfoA
IsDebuggerPresent
GetStdHandle
SetStdHandle
SetLastError
GetFileSize
ExitProcess
FormatMessageA
ReadFile
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetFullPathNameA
GetLastError
CloseHandle
InterlockedDecrement
GetVersionExA
LocalFree
LocalAlloc
UnhandledExceptionFilter
IsBadWritePtr
GetModuleHandleA
user32
MessageBoxA
wsprintfA
advapi32
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegEnumKeyExA
RegDeleteValueA
RegQueryInfoKeyA
ole32
CoInitialize
CoUninitialize
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ