?InsertCustomData@@YGKXZ
Static task
static1
Behavioral task
behavioral1
Sample
ba8a1663c3bdc14afc378bc540d8eedf73dce0f362c6eb94efb3b23ca1605c52.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba8a1663c3bdc14afc378bc540d8eedf73dce0f362c6eb94efb3b23ca1605c52.exe
Resource
win10v2004-20220812-en
General
-
Target
ba8a1663c3bdc14afc378bc540d8eedf73dce0f362c6eb94efb3b23ca1605c52
-
Size
187KB
-
MD5
98a41caf866996c6fb6941e46baaf237
-
SHA1
1a4e5d7adce0515e661be85c05b88cfc59dd8acc
-
SHA256
ba8a1663c3bdc14afc378bc540d8eedf73dce0f362c6eb94efb3b23ca1605c52
-
SHA512
89552f93efa3a9888894bbea9c754e09d72336206fb10d8e7b5f1f98cdbf0c2d96f69389d7f8a93ba7d0152464c44bfae41fe265b273a3687802c6823e4c513f
-
SSDEEP
3072:6vIOb0BQa1BgAxs8/GGzEg16nynnPJWPXsjkiaHu2vDPBVCMem0yhkoK/:uIOAWAHT3zEg16APJW0UzLjk7N/
Malware Config
Signatures
Files
-
ba8a1663c3bdc14afc378bc540d8eedf73dce0f362c6eb94efb3b23ca1605c52.exe windows x86
65f1779b686361b65fa2914474ac66e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryA
EnumResourceTypesA
GetFileInformationByHandle
FlushFileBuffers
WaitForSingleObjectEx
EnumSystemLocalesA
HeapAlloc
shlwapi
PathUnquoteSpacesW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
user32
GetForegroundWindow
MessageBoxW
KillTimer
CheckRadioButton
ntdll
RtlCaptureContext
Exports
Exports
Sections
.text Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ