Static task
static1
Behavioral task
behavioral1
Sample
71f61abfc8f4df0a8e9e619555b92c77c0f137bc5d736b92645bfb0e6cbc4a42.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
71f61abfc8f4df0a8e9e619555b92c77c0f137bc5d736b92645bfb0e6cbc4a42.exe
Resource
win10v2004-20220812-en
General
-
Target
71f61abfc8f4df0a8e9e619555b92c77c0f137bc5d736b92645bfb0e6cbc4a42
-
Size
111KB
-
MD5
12a366d6dccaeccec5369eca529c0a30
-
SHA1
a89e261407a247602d66864b59ad6718ad11ccb4
-
SHA256
71f61abfc8f4df0a8e9e619555b92c77c0f137bc5d736b92645bfb0e6cbc4a42
-
SHA512
85dd919c40bec183d72fb74a6481bbf886a71c4d1c5fe88f23ab0ea4042984184b0c186ef787e93f87eb149e1750d2c6d54e877ea10ac7b1fa6801803b529cbc
-
SSDEEP
1536:lz0FiAmV27inmrPw6vo4CKPSRoPpCoOsbR7kD+7aty4lYLKswI+:CFGHSTaKKRabJkD+mpCLKbr
Malware Config
Signatures
Files
-
71f61abfc8f4df0a8e9e619555b92c77c0f137bc5d736b92645bfb0e6cbc4a42.exe windows x86
a0ae966a35d96e9a9a14d50f4865f856
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
gdi32
BitBlt
SetBkColor
GetPixel
SelectObject
CreatePalette
ole32
CoReleaseMarshalData
CoTaskMemFree
OleRun
CoDisconnectObject
CoFreeUnusedLibraries
version
VerInstallFileA
VerQueryValueA
VerFindFileA
shell32
SHGetDesktopFolder
SHGetDiskFreeSpaceA
Shell_NotifyIconA
DragQueryFileA
SHGetFileInfoA
comctl32
ImageList_Destroy
ImageList_GetBkColor
ImageList_Create
ImageList_Write
comdlg32
FindTextA
GetOpenFileNameA
kernel32
GetModuleHandleA
GetOEMCP
VirtualAllocEx
ExitProcess
GetCommandLineA
GetProcAddress
oleaut32
SafeArrayGetUBound
GetErrorInfo
user32
GetCursor
CharNextA
IsWindowEnabled
GetSysColorBrush
MessageBoxA
GetActiveWindow
SetWindowPlacement
IntersectRect
shlwapi
SHQueryInfoKeyA
SHDeleteValueA
SHSetValueA
SHDeleteKeyA
SHStrDupA
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 587B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ