Static task
static1
Behavioral task
behavioral1
Sample
d3ea75870e2deff7800abbe609c416465ee5ad8eb1d01ef1e6137e512ea99861.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d3ea75870e2deff7800abbe609c416465ee5ad8eb1d01ef1e6137e512ea99861.exe
Resource
win10v2004-20220812-en
General
-
Target
d3ea75870e2deff7800abbe609c416465ee5ad8eb1d01ef1e6137e512ea99861
-
Size
165KB
-
MD5
3f4698bd241dc040b2fc90671bc7205f
-
SHA1
6592433a449665d3c2a3fb42d2476515f0323fae
-
SHA256
d3ea75870e2deff7800abbe609c416465ee5ad8eb1d01ef1e6137e512ea99861
-
SHA512
e686dba69ca4b16526a7781f555123ad10cce4a93b4b7cbe05aab6a48485ac93cc460383858f365d493a47c8d5844c64426bc8e069320d29e360c507bba2a09d
-
SSDEEP
3072:EnxPsUWqgGFpgJUhyvipDwMJ3cQgOaY+v2Xv8f/Gxe53ezSM7bkIf:EnxNWRGFpy+JDBcQrov2/8fwgeztcIf
Malware Config
Signatures
Files
-
d3ea75870e2deff7800abbe609c416465ee5ad8eb1d01ef1e6137e512ea99861.exe windows x86
b3fd993079141eea86d54d75d3c24b86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LoadLibraryA
CreateFileA
GetCurrentProcess
ExitProcess
LCMapStringA
user32
wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow
CreateWindowExA
advapi32
RegEnumKeyA
RegDeleteValueA
RegQueryValueA
RegSetValueA
RegCloseKey
RegCreateKeyA
RegEnumValueA
RegDeleteKeyA
RegOpenKeyA
Sections
.text Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ