Static task
static1
Behavioral task
behavioral1
Sample
838e8b499dca1bd3d8876e2ee3db306b9772b8a99f20ec5342658af763c27c9d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
838e8b499dca1bd3d8876e2ee3db306b9772b8a99f20ec5342658af763c27c9d.exe
Resource
win10v2004-20221111-en
General
-
Target
838e8b499dca1bd3d8876e2ee3db306b9772b8a99f20ec5342658af763c27c9d
-
Size
115KB
-
MD5
12b70dad49a9ca592c66e1e705ae1300
-
SHA1
88b6dff224dc05acf5fa9d1096f86c1cc999bf62
-
SHA256
838e8b499dca1bd3d8876e2ee3db306b9772b8a99f20ec5342658af763c27c9d
-
SHA512
a032ecf7b8592107f1b2715b5a9a63f2646a44fa87959727b8474bfb23b468493b8c96c5ced4c4d0cc8eadd7beee8040a471a8ad2d49b0de894d13d8c769de8f
-
SSDEEP
1536:UkoAzrk0MkJaG3Tmi8eCWWAu4+y268gtZYL86v7EZ3c:JRzrnMZG318eCWlkyB86ZY46QO
Malware Config
Signatures
Files
-
838e8b499dca1bd3d8876e2ee3db306b9772b8a99f20ec5342658af763c27c9d.exe windows x86
6d1c598a022c8b4e0de28421f901a7fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CopyEnhMetaFileA
LineTo
CreatePenIndirect
RestoreDC
advapi32
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
ole32
WriteClassStm
CoGetObjectContext
CoUninitialize
OleCreateStaticFromData
version
GetFileVersionInfoA
shlwapi
PathGetCharTypeA
SHEnumValueA
kernel32
ExitProcess
GetModuleHandleA
GetVersionExA
GetCommandLineA
VirtualAllocEx
LocalAlloc
GetProcAddress
oleaut32
VariantCopyInd
SysFreeString
RegisterTypeLib
VariantChangeType
SafeArrayCreate
OleLoadPicture
SafeArrayUnaccessData
SysReAllocStringLen
SysAllocStringLen
comctl32
ImageList_Destroy
ImageList_Create
ImageList_Remove
ImageList_Read
ImageList_Add
ImageList_DragShowNolock
ImageList_Draw
ImageList_GetBkColor
ImageList_DrawEx
ImageList_Write
user32
IsChild
IsWindowEnabled
Sections
CODE Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 609B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE