Static task
static1
Behavioral task
behavioral1
Sample
a1be68e782c2bea3fdf9e348b925ae110ffc471f358de39b1281d41df6d8a90c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a1be68e782c2bea3fdf9e348b925ae110ffc471f358de39b1281d41df6d8a90c.exe
Resource
win10v2004-20220901-en
General
-
Target
a1be68e782c2bea3fdf9e348b925ae110ffc471f358de39b1281d41df6d8a90c
-
Size
28KB
-
MD5
0dceebdfe028832b08ba311124bc8ca9
-
SHA1
284226674fedf23529059ed80ba54636adf0ad9b
-
SHA256
a1be68e782c2bea3fdf9e348b925ae110ffc471f358de39b1281d41df6d8a90c
-
SHA512
7b602680658d6bd0dc4fe852864c7976c0e7a5c23ba982dac956cd19fad08951fdb44eebf3075defe1a1c79efc4656256e67498dd373d8064dd37994bce82fb0
-
SSDEEP
384:18IMTWcqPtaOEv34CA/hjWecL+jTlOegNGaZtuyzAMLFMWlZVG4thxYVS:18l6tP47414ecSnlOegccz+EFthxIS
Malware Config
Signatures
Files
-
a1be68e782c2bea3fdf9e348b925ae110ffc471f358de39b1281d41df6d8a90c.exe windows x86
ba795fdff7da6ff1999d60b0e77cf451
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetCurrentThread
VirtualQueryEx
VirtualProtectEx
ExitProcess
user32
CreateCaret
GetForegroundWindow
ShowCaret
Sections
CODE Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.baighq Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ