Static task
static1
Behavioral task
behavioral1
Sample
a67b4e1e87e22d551069f8803e25b55bbb9e8f1b4392ae94cfc40947bfa41cd6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a67b4e1e87e22d551069f8803e25b55bbb9e8f1b4392ae94cfc40947bfa41cd6.exe
Resource
win10v2004-20220812-en
General
-
Target
a67b4e1e87e22d551069f8803e25b55bbb9e8f1b4392ae94cfc40947bfa41cd6
-
Size
18KB
-
MD5
a984b56a6f7d02c8fa7fc43f19317ad3
-
SHA1
19a8128d808226bc833dcb02259a2b825124d56c
-
SHA256
a67b4e1e87e22d551069f8803e25b55bbb9e8f1b4392ae94cfc40947bfa41cd6
-
SHA512
063dbf73c1a3ad8bad608a331719d0957dccc6863a2b7496340614bff68fb3ef4be7b84e465ee01b2b9104dff854de120baa593ba52fadfca650c2bfb59e060f
-
SSDEEP
384:qNPZpoZW6cuIqNYpENn5s514i8LYUZhIN:gPZVKnNYpENnZjLB
Malware Config
Signatures
Files
-
a67b4e1e87e22d551069f8803e25b55bbb9e8f1b4392ae94cfc40947bfa41cd6.exe windows x86
6720e904f066c8c54724c6f98ac568a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapWalk
TlsGetValue
VirtualProtect
GetProfileIntA
GlobalUnlock
WaitForSingleObject
GetModuleHandleA
FindAtomA
GetACP
CloseHandle
LoadLibraryA
lstrlenA
GetAtomNameA
TlsFree
CompareFileTime
GetTickCount
InterlockedExchange
GetVersion
HeapReAlloc
GetConsoleCP
GetStdHandle
user32
DispatchMessageA
CreateCaret
GetKeyboardLayout
GetScrollRange
TranslateMessage
PaintDesktop
PostQuitMessage
GetWindowTextA
UpdateWindow
SubtractRect
DestroyMenu
GetMenuStringA
GetMenu
EqualRect
ShowWindow
InflateRect
MessageBoxA
EnableScrollBar
GetDlgItem
CopyRect
SetPropA
InsertMenuA
LoadIconA
SetWindowPos
DialogBoxParamA
PostMessageA
ModifyMenuA
msi
MsiCloseHandle
MsiDoActionA
MsiGetMode
MsiEnumProductsA
MsiEnumClientsA
clbcatq
CoRegCleanup
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ