Static task
static1
Behavioral task
behavioral1
Sample
920ceee27d4cb8b626e5bafd8a6c99e68bdb6a2e3191c9c574484fa83d56a7c1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
920ceee27d4cb8b626e5bafd8a6c99e68bdb6a2e3191c9c574484fa83d56a7c1.exe
Resource
win10v2004-20220812-en
General
-
Target
920ceee27d4cb8b626e5bafd8a6c99e68bdb6a2e3191c9c574484fa83d56a7c1
-
Size
110KB
-
MD5
ec5b2b7fc4f37a08c508dcd099748ad4
-
SHA1
3496fa7bb4f76b79ced3513bfa301b3e1e9bb7e3
-
SHA256
920ceee27d4cb8b626e5bafd8a6c99e68bdb6a2e3191c9c574484fa83d56a7c1
-
SHA512
0f4b4a76295c538d2ec953a59858c6787d45f308a87fb3e52a14db3e2ecb73d71aaed89df8d5c8de641804ddbd04fe25a693011b4e907f4900e346494b2eb0da
-
SSDEEP
3072:Kd5D61VH7jIoRMOvTyHEis4QMlrZco2K:4Q5LcUtMPnv
Malware Config
Signatures
Files
-
920ceee27d4cb8b626e5bafd8a6c99e68bdb6a2e3191c9c574484fa83d56a7c1.exe windows x86
c9fe7012d40775a076a2d5585dc8bf3c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
GetUserNameA
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
kernel32
AddAtomA
CloseHandle
CreateFileA
CreateFileMappingA
CreateMutexA
ExitProcess
FindAtomA
FindResourceA
FreeLibrary
FreeResource
GetAtomNameA
GetCommandLineA
GetComputerNameA
GetDriveTypeA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetVolumeInformationA
LoadLibraryA
LoadResource
LockResource
OpenMutexA
SetUnhandledExceptionFilter
SizeofResource
VirtualProtect
VirtualQuery
WriteFile
lstrlenA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memcpy
signal
sprintf
sscanf
strcat
strcpy
strncat
strncpy
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 376B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRCx Size: 512B - Virtual size: 4KB
.lewnjek Size: 4KB - Virtual size: 41KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE