Static task
static1
Behavioral task
behavioral1
Sample
a9e4d3b84d38ad5785333b500283f23be2a205788016f32096d42d139359e824.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a9e4d3b84d38ad5785333b500283f23be2a205788016f32096d42d139359e824.exe
Resource
win10v2004-20221111-en
General
-
Target
a9e4d3b84d38ad5785333b500283f23be2a205788016f32096d42d139359e824
-
Size
160KB
-
MD5
2e2f2cb3235b2a45e3ed2ad319fee6c9
-
SHA1
7a50754a5b1af0c2e2e56b813b5f2073f23205d2
-
SHA256
a9e4d3b84d38ad5785333b500283f23be2a205788016f32096d42d139359e824
-
SHA512
f9d3d380349aa93857286d3d318aedfbb2066fb764966fdf8112726db977ad3e16691866cbe2d90bfec086e41d77f0e157be6fee5fc8312c92600a0de18401b7
-
SSDEEP
3072:fGW5eEWIMY02Pazr1OwCRJxXDd4TEsqXv/nxEFXaI6/lLSHyUgzG0do:+WUElsIaJCRjXQEsq3xEFXe/l+Hgzhdo
Malware Config
Signatures
Files
-
a9e4d3b84d38ad5785333b500283f23be2a205788016f32096d42d139359e824.exe windows x86
e405851cd762a39fd65216907519f720
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CreateFileA
LoadLibraryA
CloseHandle
GetCurrentProcess
ExitProcess
user32
CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA
advapi32
RegCloseKey
RegCreateKeyA
RegEnumKeyA
RegEnumValueA
RegDeleteValueA
RegOpenKeyA
RegDeleteKeyA
RegSetValueA
RegQueryValueA
Sections
.text Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ