Static task
static1
Behavioral task
behavioral1
Sample
967623a16ad3549f0b10d126427942d8d6fa033b4903c03a82eb28ff667a391c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
967623a16ad3549f0b10d126427942d8d6fa033b4903c03a82eb28ff667a391c.exe
Resource
win10v2004-20220812-en
General
-
Target
967623a16ad3549f0b10d126427942d8d6fa033b4903c03a82eb28ff667a391c
-
Size
918KB
-
MD5
15542d3094fb9a04f98c434ea4e45370
-
SHA1
2005dd47603dc476401b135bb1d3d09808a263de
-
SHA256
967623a16ad3549f0b10d126427942d8d6fa033b4903c03a82eb28ff667a391c
-
SHA512
ac8bc28cfaecb393be5cce229ebb22344e44acb950f2d960df9d3698d9a7ca7568f270704a110ba9984592537aa26012336600af7540e3eb7a7ab9d316a6ca47
-
SSDEEP
12288:PXIeIF9bot8QBh6XIeIF9bot8QBh6UaP6ppgg2HFZlxQ92XH0CAqOm5yOvei3DR:PIdgh0IdghiqmTQ96H0CA5G
Malware Config
Signatures
Files
-
967623a16ad3549f0b10d126427942d8d6fa033b4903c03a82eb28ff667a391c.exe windows x86
93b3db8e844eee43bb2305ea1d8b9aea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WaitForSingleObject
lstrcmpA
GetPrivateProfileStringA
SetEndOfFile
WriteFile
SetFilePointer
lstrlenA
SearchPathA
LoadLibraryA
CreateFileA
lstrcpyA
GetExitCodeProcess
OpenProcess
CreateProcessA
WritePrivateProfileStringA
LocalAlloc
LocalFree
GetCurrentThread
ExitProcess
SetThreadPriority
FreeLibrary
GetProcAddress
lstrcpynA
lstrcmpiA
GetModuleFileNameA
GetCommandLineA
GlobalFree
GetWindowsDirectoryA
GetStartupInfoA
ReadFile
GetFileSize
GlobalAlloc
user32
ShowWindow
CreateWindowExA
LoadStringA
MessageBoxA
FindWindowA
wsprintfA
SendMessageA
CharNextA
CharLowerA
shell32
ShellExecuteExA
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegFlushKey
RegOpenKeyA
RegCloseKey
RegCreateKeyA
RegSetValueExA
RegQueryValueExA
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE