Static task
static1
Behavioral task
behavioral1
Sample
a04eb7dade3a6bc95d2c04a11dd6cb5d9420865968c9b333c3d4de4fa8ebb531.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a04eb7dade3a6bc95d2c04a11dd6cb5d9420865968c9b333c3d4de4fa8ebb531.exe
Resource
win10v2004-20221111-en
General
-
Target
a04eb7dade3a6bc95d2c04a11dd6cb5d9420865968c9b333c3d4de4fa8ebb531
-
Size
316KB
-
MD5
55d1aaff8cb58b81c249d7996de98ed8
-
SHA1
45873f8a171a50f95c0d50f64040b08f22d8281a
-
SHA256
a04eb7dade3a6bc95d2c04a11dd6cb5d9420865968c9b333c3d4de4fa8ebb531
-
SHA512
d7ebd9c718e5447c5aae0ef404857f4e94d0d7436353e88c5e5fcf15e88b165a40e34cef3cae490fa3bde6a00464cd7c4e48ebdae9b75a0b8ca8adc775c9b3c5
-
SSDEEP
6144:rgUzVP6rNX+ZAQEqjbEY2L/iSiumcZrSf5G8LUu9d:rgl5XGFgaDufZmfZH9d
Malware Config
Signatures
Files
-
a04eb7dade3a6bc95d2c04a11dd6cb5d9420865968c9b333c3d4de4fa8ebb531.exe windows x86
75bd6b9268c42c3e32e1d8d8df4928f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetACP
GetCurrentProcessId
HeapCreate
GetThreadPriority
OpenSemaphoreA
GetEnvironmentStringsA
VirtualProtect
IsDebuggerPresent
GetStdHandle
GetModuleHandleA
FlushFileBuffers
WriteConsoleA
GetExpandedNameA
FormatMessageA
DeleteAtom
GetTimeFormatA
GetCurrentThread
InterlockedExchange
LoadLibraryA
HeapDestroy
user32
EndPaint
DrawTextA
ReleaseDC
GetWindow
GetWindowTextLengthA
GetFocus
IsIconic
SetForegroundWindow
FillRect
ValidateRgn
ShowWindow
GetClassNameA
FrameRect
GetParent
BeginPaint
SetActiveWindow
wsprintfA
GetDlgItem
GetCursorPos
advapi32
RegQueryInfoKeyA
RegEnumKeyA
RegCloseKey
RegCreateKeyA
RegFlushKey
uxtheme
GetThemeSysFont
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ