Static task
static1
Behavioral task
behavioral1
Sample
d43c55244823e1a5c9a378ceb2203b98d343cac4306c0b294b0e495769d7e677.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d43c55244823e1a5c9a378ceb2203b98d343cac4306c0b294b0e495769d7e677.exe
Resource
win10v2004-20220901-en
General
-
Target
d43c55244823e1a5c9a378ceb2203b98d343cac4306c0b294b0e495769d7e677
-
Size
810KB
-
MD5
6ff1c97bf56249834158cec6e62e0a9a
-
SHA1
db74ea7cf2c5c30c9dd23f564b0ecbbe9ef889f4
-
SHA256
d43c55244823e1a5c9a378ceb2203b98d343cac4306c0b294b0e495769d7e677
-
SHA512
ca161711871d1124b84ac8eec7f9e3ffdec2d5293ec096a4e488dae43a80f60b1e9549c1a3f7766bf852deeaff5ca9cd787bda0c06394389a62bb9fda80c1f6b
-
SSDEEP
12288:TMWzLfz2w7bgyS9hAAsBX4hEjO02COLVmUI9HzCAXff8HFjskav2ivTDRW228:QW5/SEh5602CmYmkf0HFjouivTDRWC
Malware Config
Signatures
Files
-
d43c55244823e1a5c9a378ceb2203b98d343cac4306c0b294b0e495769d7e677.exe windows x86
7d0216f1e4b341dd2dd9592070ac9022
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetKeyboardType
CreateWindowExA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
advapi32
RegQueryValueExA
RegQueryValueExA
oleaut32
SysFreeString
SafeArrayPtrOfIndex
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
Sections
.text Size: 20KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE