Static task
static1
Behavioral task
behavioral1
Sample
b20aa3b867aaececdbdc586c1bc418087e0b60c2511bff4edbf33e4cc9493bfc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b20aa3b867aaececdbdc586c1bc418087e0b60c2511bff4edbf33e4cc9493bfc.exe
Resource
win10v2004-20221111-en
General
-
Target
b20aa3b867aaececdbdc586c1bc418087e0b60c2511bff4edbf33e4cc9493bfc
-
Size
161KB
-
MD5
7e097a2553255dabef77532c4537a626
-
SHA1
19620d1c50c3bd4e42d0b63bf244832c92713ee9
-
SHA256
b20aa3b867aaececdbdc586c1bc418087e0b60c2511bff4edbf33e4cc9493bfc
-
SHA512
e5b414fc14157e8bf49f85ee6f24bba004ae71d6f127339aabc7836dd89fa22387e8073e61c40085ce6bc3bf5cde0ad84cd3ef137cdc8f1f2c2979af349c7cbd
-
SSDEEP
3072:yxLYakR2+nUbkmukIKzk8QYkgY5/+BuDd6pJt7K2U5D45YK+ylWWC:yx1kg+nUbrzIoklYkgYdnDdaJt7KDLyi
Malware Config
Signatures
Files
-
b20aa3b867aaececdbdc586c1bc418087e0b60c2511bff4edbf33e4cc9493bfc.exe windows x86
fa2125be511931e53fe4cc6284b3565e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CreateFileA
ExitProcess
CloseHandle
GetCurrentProcess
LCMapStringA
user32
SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
CreateWindowExA
advapi32
RegCloseKey
RegDeleteKeyA
RegEnumValueA
RegOpenKeyA
RegDeleteValueA
RegQueryValueA
RegSetValueA
RegCreateKeyA
RegEnumKeyA
Sections
.text Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ