Static task
static1
Behavioral task
behavioral1
Sample
cd51e889f239ea57fe22d68d587e9e557ada552fc629aa7611716937a1fe4b84.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd51e889f239ea57fe22d68d587e9e557ada552fc629aa7611716937a1fe4b84.exe
Resource
win10v2004-20220812-en
General
-
Target
cd51e889f239ea57fe22d68d587e9e557ada552fc629aa7611716937a1fe4b84
-
Size
630KB
-
MD5
532f225706bcd170d8b4bdcf936f2b1c
-
SHA1
8a8e85655959958232aea7e0148fd9cb7af1900e
-
SHA256
cd51e889f239ea57fe22d68d587e9e557ada552fc629aa7611716937a1fe4b84
-
SHA512
d2291445afb379fd556d15663545b8c7da79b585c6950bcbff8c59b3ae96a48705fa231f9025a6293b1c86957e37cd5bced1827a3765c09d64043b83176ef957
-
SSDEEP
12288:kYG47w2JwAa5avYChogntE6tLAdzEh0qUWajYyW7CqBC:e47w2JwAa+ntHtLsQWWajYveqE
Malware Config
Signatures
Files
-
cd51e889f239ea57fe22d68d587e9e557ada552fc629aa7611716937a1fe4b84.exe windows x86
11400dc26cd6fb71ae9152d66dc4e1c0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
SaveDC
comctl32
ImageList_Add
Sections
.MPRESS1 Size: 600KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE