Static task
static1
Behavioral task
behavioral1
Sample
91c79ad37a2a28d3d73610294dd8edda017de98ba355eb8a9240e9f74670fa53.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
91c79ad37a2a28d3d73610294dd8edda017de98ba355eb8a9240e9f74670fa53.exe
Resource
win10v2004-20220812-en
General
-
Target
91c79ad37a2a28d3d73610294dd8edda017de98ba355eb8a9240e9f74670fa53
-
Size
725KB
-
MD5
ebe20a9b21a97c895c7710b92f21932b
-
SHA1
4e1447b8f893648a70fbe3537972a0341d50f28f
-
SHA256
91c79ad37a2a28d3d73610294dd8edda017de98ba355eb8a9240e9f74670fa53
-
SHA512
94521cd04135d0e090a6f0d83ddf24609a497d758cc414e812aeebfac4e2f5f412792290b3573b60d9ef971ef76d11e9f78a6961cb569cc263f6ce407e92c1f2
-
SSDEEP
6144:OnaCTeOV0dyBxPi/0AeDa86YDkUHbWTUdOJ3Nl60f49mLI9r7rEHawd:OaSX0ewsApY/6TUU3w0YmLIp5W
Malware Config
Signatures
Files
-
91c79ad37a2a28d3d73610294dd8edda017de98ba355eb8a9240e9f74670fa53.exe windows x86
b7dc5eecc49b6b911019e612513b44e1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
GetCurrentProcess
CloseHandle
CreateFileA
LoadLibraryA
ExitProcess
user32
CharLowerBuffA
CreateWindowExA
SetWindowLongA
CloseWindow
wsprintfA
advapi32
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegQueryValueA
RegCreateKeyA
RegSetValueA
RegDeleteValueA
RegOpenKeyA
RegEnumValueA
Sections
.text Size: 684KB - Virtual size: 684KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ