Static task
static1
Behavioral task
behavioral1
Sample
b7eedf36289ef14bec488aa90c9fd58cc7f72e79a099010ee83cb36274516ae1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b7eedf36289ef14bec488aa90c9fd58cc7f72e79a099010ee83cb36274516ae1.exe
Resource
win10v2004-20221111-en
General
-
Target
b7eedf36289ef14bec488aa90c9fd58cc7f72e79a099010ee83cb36274516ae1
-
Size
300KB
-
MD5
4f0f8c2f0b7aba10175b3953ddf2122d
-
SHA1
ed74cf27c1ca5acaaf165ebaaaf7cc75de6d36e3
-
SHA256
b7eedf36289ef14bec488aa90c9fd58cc7f72e79a099010ee83cb36274516ae1
-
SHA512
efbc511285996928077924e1d91763b1bb2b9b7b6ee699661045f42c097fe45cae1ff97fa79e8958c56430a477a0defeed9b2e0fc1e195cd0632e2a92218ad5f
-
SSDEEP
6144:FSB7miLs5k3nVkGgqgrkY4AksQ2vs03VL:EBqys5kKGgmY4AkDGd
Malware Config
Signatures
Files
-
b7eedf36289ef14bec488aa90c9fd58cc7f72e79a099010ee83cb36274516ae1.exe windows x86
16fcc0a3f8c92c6774265b5e7281e460
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetLastError
GetACP
ExitThread
IsBadReadPtr
VirtualAllocEx
GetModuleHandleA
LoadLibraryExA
GlobalAlloc
lstrlenA
VirtualAlloc
GetProcAddress
ole32
CoGetContextToken
CoUninitialize
OleRun
CLSIDFromProgID
shell32
SHGetFolderPathA
SHGetDesktopFolder
SHGetFileInfoA
SHGetSpecialFolderLocation
Shell_NotifyIconA
comdlg32
ChooseColorA
GetFileTitleA
FindTextA
GetOpenFileNameA
version
GetFileVersionInfoA
VerQueryValueA
gdi32
GetDIBColorTable
CreatePalette
GetObjectA
CreateDIBitmap
GetPixel
CreatePenIndirect
CreateCompatibleDC
CopyEnhMetaFileA
GetBitmapBits
shlwapi
SHDeleteKeyA
PathIsDirectoryA
SHGetValueA
SHQueryValueExA
PathGetCharTypeA
PathFileExistsA
SHQueryInfoKeyA
SHEnumValueA
SHSetValueA
user32
GetKeyboardLayout
CheckMenuItem
GetMenuItemCount
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES17 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES05 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES63 Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES29 Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES83 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES55 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES26 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES04 Size: 512B - Virtual size: 219B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ