Static task
static1
Behavioral task
behavioral1
Sample
ce1734a217524524443f0d5a12e3dd8741c05ba069178f5edb3d1dbf04b7b544.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ce1734a217524524443f0d5a12e3dd8741c05ba069178f5edb3d1dbf04b7b544.exe
Resource
win10v2004-20221111-en
General
-
Target
ce1734a217524524443f0d5a12e3dd8741c05ba069178f5edb3d1dbf04b7b544
-
Size
114KB
-
MD5
12bf68659735c4bcc5f3ec98c59608c0
-
SHA1
f4cc65e0f5791c7d31a54f54e958f3604535dbcb
-
SHA256
ce1734a217524524443f0d5a12e3dd8741c05ba069178f5edb3d1dbf04b7b544
-
SHA512
9a88308fea28a29bf5aa5eaa0c9040386fa7baac3e04a4caa340218a143c8decf11a99786c5f3f6377a89ea12168a0648dad6b411bc8f1d0ac54a78349c42fd8
-
SSDEEP
3072:Xl1FHZh+QIBbrTSnLFOQvyW8NlKzHFC2:1zHkHYLFqffy
Malware Config
Signatures
Files
-
ce1734a217524524443f0d5a12e3dd8741c05ba069178f5edb3d1dbf04b7b544.exe windows x86
dff875864b4333471fd5369991768f83
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFolderPathA
SHFileOperationA
advapi32
RegEnumKeyA
shlwapi
SHDeleteValueA
PathGetCharTypeA
comctl32
ImageList_GetBkColor
ImageList_Remove
ImageList_Create
ImageList_Read
ImageList_Write
kernel32
GlobalAlloc
GetOEMCP
VirtualAlloc
ExitThread
GetProcAddress
GetACP
GetVersionExA
LocalAlloc
VirtualAllocEx
GetModuleHandleA
user32
CreateMenu
WindowFromPoint
MessageBoxA
IsWindowVisible
CreatePopupMenu
GetScrollPos
CreateIcon
gdi32
CreateFontIndirectA
CreateBitmap
GetBitmapBits
GetDIBColorTable
CreateDIBitmap
GetObjectA
SelectObject
SetBkColor
GetDIBits
ole32
OleCreateStaticFromData
CoReleaseMarshalData
StgCreateDocfileOnILockBytes
PropVariantClear
CoRegisterClassObject
CoCreateInstanceEx
CoCreateFreeThreadedMarshaler
comdlg32
GetSaveFileNameA
GetOpenFileNameA
FindTextA
ChooseColorA
GetFileTitleA
version
VerInstallFileA
GetFileVersionInfoSizeA
oleaut32
SafeArrayCreate
GetErrorInfo
OleLoadPicture
RegisterTypeLib
SysReAllocStringLen
Sections
CODE Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 386B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ