Static task
static1
Behavioral task
behavioral1
Sample
2d2014527960908e71d3b210ed0cd8066a937ac1689e48c127fb4f41e9ff7d84.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2d2014527960908e71d3b210ed0cd8066a937ac1689e48c127fb4f41e9ff7d84.exe
Resource
win10v2004-20220812-en
General
-
Target
2d2014527960908e71d3b210ed0cd8066a937ac1689e48c127fb4f41e9ff7d84
-
Size
751KB
-
MD5
0c6d3dbea9b75bf2c586947d84d8c467
-
SHA1
f4c810cd23a01c0507e9c231f69220c61688d7f7
-
SHA256
2d2014527960908e71d3b210ed0cd8066a937ac1689e48c127fb4f41e9ff7d84
-
SHA512
93392db45cc10db5d7e42f36ba4aad0f082262c8746357f78e4d5bc85e59def531fc79f05054908a199fbccdb2d6225dd8078f2017f8bc49ecaf719afb86bc21
-
SSDEEP
12288:nVfRLwIehIIsY42IQUTsSTPYzpeVshFbK0A3vvmAcosmtiiCKikJMW9FrZnBuv9E:nVR8thIm42I7PT8cViJ8Tkia+MW/ZBKW
Malware Config
Signatures
Files
-
2d2014527960908e71d3b210ed0cd8066a937ac1689e48c127fb4f41e9ff7d84.exe windows x86
52736e9c5f95550edcb96dfe57bc1ea8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
CreateMutexA
GetFileAttributesA
ResetEvent
CloseHandle
GetStartupInfoW
GetModuleHandleA
SetLastError
RemoveDirectoryA
CreateFileA
ExitProcess
GetStdHandle
GetCommandLineW
WaitForMultipleObjects
HeapSize
GetEnvironmentVariableW
HeapCreate
CreatePipe
DeleteFileA
GetConsoleTitleA
GetTickCount
OpenProcess
WaitForSingleObject
FindClose
Sleep
user32
GetDC
FillRect
GetClassInfoA
GetDC
DispatchMessageW
GetWindowLongA
MessageBoxA
GetSysColor
PeekMessageA
GetDC
CallWindowProcW
FindWindowW
DispatchMessageW
ureg
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 745KB - Virtual size: 745KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ