Static task
static1
Behavioral task
behavioral1
Sample
c94f3bafd25fd9aebedc85dfaaf23dff1f223b70067598e946032081b5db7e99.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c94f3bafd25fd9aebedc85dfaaf23dff1f223b70067598e946032081b5db7e99.exe
Resource
win10v2004-20221111-en
General
-
Target
c94f3bafd25fd9aebedc85dfaaf23dff1f223b70067598e946032081b5db7e99
-
Size
196KB
-
MD5
5b738da7a4f5a4c4dc29516737fb1d46
-
SHA1
da18a454750814748696a5403d0673dba9cdcc91
-
SHA256
c94f3bafd25fd9aebedc85dfaaf23dff1f223b70067598e946032081b5db7e99
-
SHA512
c81c7576264e3760e8c185f8e2d53b255f18de145a6f094bda23233d847e3aaa72d3e648939d63bc37fd521d13da75717cd14c7ac6c4be58bfee8af799a57da6
-
SSDEEP
6144:njtSt0+twVKsUCK2zx73FsNUVqbhvyr8gKM6Pz:ZStZ/KKaFeOo5y4g50z
Malware Config
Signatures
Files
-
c94f3bafd25fd9aebedc85dfaaf23dff1f223b70067598e946032081b5db7e99.exe windows x86
b0e81f8d03792a9a7cad60c653e46bc1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LoadLibraryA
GetCurrentProcess
CloseHandle
CreateFileA
LCMapStringA
user32
CloseWindow
CharLowerBuffA
wsprintfA
SetWindowLongA
CreateWindowExA
advapi32
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegSetValueA
RegEnumKeyA
RegOpenKeyA
RegCloseKey
RegEnumValueA
RegQueryValueA
Sections
.text Size: 165KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ