Static task
static1
Behavioral task
behavioral1
Sample
79b08c43d09a303f6cfa15976277d7ce3fce0286548c244613e41df4b2683af4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
79b08c43d09a303f6cfa15976277d7ce3fce0286548c244613e41df4b2683af4.exe
Resource
win10v2004-20221111-en
General
-
Target
79b08c43d09a303f6cfa15976277d7ce3fce0286548c244613e41df4b2683af4
-
Size
1.0MB
-
MD5
8790a91298f75362923fc05bc0b4df38
-
SHA1
ca4142642a0b870d6b6e2c2d26c8d4fb7642d958
-
SHA256
79b08c43d09a303f6cfa15976277d7ce3fce0286548c244613e41df4b2683af4
-
SHA512
3597790130e6fd36c7cdeb78314ab6ffe86612a922ef55e6b0ad56073bd8ebc15b22116dda2336d7dbfada1d3169258249d88cff028eb92866ff0f28eb709a7a
-
SSDEEP
24576:1gMsju+DKCHJPsazlaBDudWSjIJEZvEHRsBx3w:1/Eu+DrBHz2Cd5KEZ8Ww
Malware Config
Signatures
Files
-
79b08c43d09a303f6cfa15976277d7ce3fce0286548c244613e41df4b2683af4.exe windows x86
b5490d6fc386581993187650d56a9423
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetVersion
GetFileSize
GetVersionExA
GetCommandLineA
LocalAlloc
lstrcatA
user32
SetFocus
SetWindowTextA
DialogBoxParamA
GetClientRect
BeginPaint
DestroyWindow
DefWindowProcA
GetMessageA
LoadIconA
GetSysColor
EndPaint
EndDialog
DispatchMessageA
TranslateMessage
GetFocus
PostQuitMessage
GetWindowRect
MessageBoxA
msvcrt
_acmdln
__p__commode
__set_app_type
__getmainargs
_controlfp
toupper
__CxxFrameHandler
__setusermatherr
wcslen
memmove
_initterm
_c_exit
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 511B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1019KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ