Static task
static1
Behavioral task
behavioral1
Sample
8eb2c69bef4e4171a06b3d866142e94543e9eb2aa2da142b84a05c55d076c70d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8eb2c69bef4e4171a06b3d866142e94543e9eb2aa2da142b84a05c55d076c70d.exe
Resource
win10v2004-20220812-en
General
-
Target
8eb2c69bef4e4171a06b3d866142e94543e9eb2aa2da142b84a05c55d076c70d
-
Size
160KB
-
MD5
ae42995cb7ba78d218f5b56308f86241
-
SHA1
9a2970449196a8ae030228d50eb53b525cb8ec4d
-
SHA256
8eb2c69bef4e4171a06b3d866142e94543e9eb2aa2da142b84a05c55d076c70d
-
SHA512
7f2ac4108eca0f0d03a763be14b3f458c803d24f242c3b500819003230d326335de01d99b36b7ac098952c6ab42497bab58b8832b65c8463b133642e300f0347
-
SSDEEP
3072:3a6OXwYI9TCsW0cKsElI28L7T79n1OotwNWet8jkcQc7tRxHtX:RswYI8/0I/L7v9nxtqtLcBBR5tX
Malware Config
Signatures
Files
-
8eb2c69bef4e4171a06b3d866142e94543e9eb2aa2da142b84a05c55d076c70d.exe windows x86
c83bba533481dd702617002f6929b5cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
CreateFileA
LCMapStringA
ExitProcess
GetCurrentProcess
user32
SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow
advapi32
RegDeleteKeyA
RegSetValueA
RegEnumKeyA
RegQueryValueA
RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegEnumValueA
RegOpenKeyA
Sections
.text Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ