Static task
static1
Behavioral task
behavioral1
Sample
8f7e9ddb1d506b5eeee2d604657d85725666086bf3644632f747ef5a68c40707.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8f7e9ddb1d506b5eeee2d604657d85725666086bf3644632f747ef5a68c40707.exe
Resource
win10v2004-20221111-en
General
-
Target
8f7e9ddb1d506b5eeee2d604657d85725666086bf3644632f747ef5a68c40707
-
Size
421KB
-
MD5
e7c914f0744944717e34737da5730d7d
-
SHA1
d22f41ed9b77428be2cf4c2d52da681de86a8cb6
-
SHA256
8f7e9ddb1d506b5eeee2d604657d85725666086bf3644632f747ef5a68c40707
-
SHA512
eac76021b108aaa466bfc365cbd8b051da922ba7712698366bbb8fc31c69001d1f816321848010cbf558c80ba72dd9b8719b4b2961c524eda8d83579bf7923e7
-
SSDEEP
6144:137xxcx8J5uybal9CEdmdwGDxNiB/3VUD6z+VMy6QUpkIe+XZYCcWYdW7lE4NR6:xlqxKMybqWNiB/9O7Uu+y5WY47L+
Malware Config
Signatures
Files
-
8f7e9ddb1d506b5eeee2d604657d85725666086bf3644632f747ef5a68c40707.exe windows x86
9a6e1550f9f801b4dea1c4cb43a6cab6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
ExitProcess
LoadLibraryA
CreateFileA
GetCurrentProcess
LCMapStringA
user32
CreateWindowExA
wsprintfA
CloseWindow
SetWindowLongA
CharLowerBuffA
advapi32
RegEnumKeyA
RegSetValueA
RegCreateKeyA
RegEnumValueA
RegOpenKeyA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegQueryValueA
Sections
.text Size: 4KB - Virtual size: 548KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ