?SanctuaryDown@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
a0f0dbe606dffb817217168f8864ca250156ed89c1382968a9c64bd1f2244d0a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a0f0dbe606dffb817217168f8864ca250156ed89c1382968a9c64bd1f2244d0a.exe
Resource
win10v2004-20220812-en
General
-
Target
a0f0dbe606dffb817217168f8864ca250156ed89c1382968a9c64bd1f2244d0a
-
Size
62KB
-
MD5
6c477ff1bdbe1e8f3fcbfd7a5ef769c5
-
SHA1
c1af45b4b7022ca0132bd98a01affb5e4de34f39
-
SHA256
a0f0dbe606dffb817217168f8864ca250156ed89c1382968a9c64bd1f2244d0a
-
SHA512
6344572126a5f6e522cc205d7f59f2a483e6c533ddeb072fd96431b2471310133a4298e3bb8705d05ea8f50b6a79f4bc328022c62a4e468f025dcddc32f1db6b
-
SSDEEP
1536:rAbZrWrUC7j3W3qvo9khc9bjMXkC7YSxxpsD:EbYrUqJvlAbjC7bxx+
Malware Config
Signatures
Files
-
a0f0dbe606dffb817217168f8864ca250156ed89c1382968a9c64bd1f2244d0a.exe windows x86
f9a9ace0be74e5f016f35042f2b607fa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageW
GetDoubleClickTime
GetForegroundWindow
kernel32
GetProcessHeap
shlwapi
ord29
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.tron Size: 512B - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data5 Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data4 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data3 Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data2 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 8KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE