Static task
static1
Behavioral task
behavioral1
Sample
7cb5e17389086438b93151adc3f4225ef8170fd12166d47a60b092a07dbdbce3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7cb5e17389086438b93151adc3f4225ef8170fd12166d47a60b092a07dbdbce3.exe
Resource
win10v2004-20220812-en
General
-
Target
7cb5e17389086438b93151adc3f4225ef8170fd12166d47a60b092a07dbdbce3
-
Size
136KB
-
MD5
2e02643289d9d3a0d7b6f13962705c45
-
SHA1
4ae641b5ee630e1af876be716d209b245329f3a5
-
SHA256
7cb5e17389086438b93151adc3f4225ef8170fd12166d47a60b092a07dbdbce3
-
SHA512
a33733d41719969dc23610f26f33a9c1654efa289df4d8444b96215219720a2b41f941e3d396432e327ce74568796f39fa64316aa858996770d875056abbe506
-
SSDEEP
3072:Z9xV476zAMBg31COvsPgXTRvge6sdxOpzTRrVvV+nuNGSXjlumuz5i:/hBg3ECsP2l6sdszZVvV+nur4Y
Malware Config
Signatures
Files
-
7cb5e17389086438b93151adc3f4225ef8170fd12166d47a60b092a07dbdbce3.exe windows x86
0e5739a7010e363db241d6ecad7d856a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeConsole
WideCharToMultiByte
FreeConsole
GetStringTypeA
FreeConsole
GetLastError
FreeConsole
HeapAlloc
FreeConsole
GlobalFree
FreeConsole
GetStringTypeW
FreeConsole
lstrcatA
FreeConsole
lstrcpynA
FreeConsole
GetLogicalDrives
FreeConsole
GetCommandLineW
GetModuleHandleA
DeleteFileA
Sleep
GlobalFree
GetOEMCP
WideCharToMultiByte
GetFileType
GetLastError
lstrcpynA
GetCommandLineW
GetCPInfo
GetLastError
GetStringTypeW
GetCommandLineA
ExitProcess
HeapAlloc
GetLogicalDrives
GetModuleFileNameA
user32
DrawTextA
DrawIconEx
CopyImage
DrawTextW
GetCursor
AlignRects
CopyIcon
GetDlgItem
GetDC
DialogBoxParamA
IsMenu
CreateIcon
DialogBoxParamW
CalcMenuBar
EndDialog
InsertMenuA
GetWindowTextA
AppendMenuA
GetMenu
advapi32
RegLoadKeyA
RegCreateKeyW
RegOpenKeyExW
RegQueryValueW
RegFlushKey
RegReplaceKeyW
RegDeleteValueA
RegQueryValueExA
RegDeleteKeyA
RegReplaceKeyA
RegLoadKeyW
RegEnumValueW
RegEnumKeyW
RegEnumKeyExA
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueA
RegCreateKeyExA
RegGetKeySecurity
RegCreateKeyExW
Sections
.taat Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.radta Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edada Size: 6KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.redoc Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ