Static task
static1
Behavioral task
behavioral1
Sample
f1e51e2a983da02a6c70cdb1f70c1b12c1b70636dc55ba1a3a061df24cdb6c37.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f1e51e2a983da02a6c70cdb1f70c1b12c1b70636dc55ba1a3a061df24cdb6c37.exe
Resource
win10v2004-20220812-en
General
-
Target
f1e51e2a983da02a6c70cdb1f70c1b12c1b70636dc55ba1a3a061df24cdb6c37
-
Size
312KB
-
MD5
ec1e5fe7720d697bb4737bd343e666b1
-
SHA1
820dcb0bd0fb5dcdf92df364c988ba58040b11d1
-
SHA256
f1e51e2a983da02a6c70cdb1f70c1b12c1b70636dc55ba1a3a061df24cdb6c37
-
SHA512
d881dd7b57c637f5582a0763a86b4a5e95efab060404af72c4c86447616a46d287f4b2ed55066739aaa9cf9dd239c708ab89b15119a2e0bd5ffe3e6b4b526d5c
-
SSDEEP
6144:/v0wx1+nDVPUjH46SrPQ3rQSg6/5YhnD25W044mztPmdTx4NwPgUvuSKq0But8:/vV2DVPUjH46Sr09seW044mzgTx4MnK
Malware Config
Signatures
Files
-
f1e51e2a983da02a6c70cdb1f70c1b12c1b70636dc55ba1a3a061df24cdb6c37.exe windows x86
1e78a26a33ba2aac0e74dbafddd94fee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
RegSetValueExW
RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegDeleteValueA
RegSetValueExA
RegDeleteKeyA
RegQueryValueExA
RegDeleteValueW
comdlg32
GetOpenFileNameW
GetOpenFileNameA
shell32
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetFileInfoA
user32
EndDialog
SetWindowTextW
SendMessageA
EnumWindowStationsW
GetDlgItem
DdeDisconnect
SetDlgItemTextA
EnableWindow
ole32
CoUninitialize
CoInitialize
kernel32
GetCommandLineW
GetProcessShutdownParameters
DeleteCriticalSection
AreFileApisANSI
CloseHandle
EnterCriticalSection
Sleep
LoadLibraryA
GetFileType
FreeLibrary
FormatMessageA
GetFullPathNameW
LoadLibraryExA
ExitProcess
FormatMessageW
GetWindowsDirectoryW
MultiByteToWideChar
CreateFileW
lstrcatA
GetWindowsDirectoryA
SetFileTime
GetModuleFileNameW
LeaveCriticalSection
GetVersionExA
GetModuleFileNameA
WideCharToMultiByte
GetLastError
GetTickCount
LocalFree
SetLastError
Sections
.text Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.line Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ