Static task
static1
Behavioral task
behavioral1
Sample
d23c94d9d8e88df5180934bde353142e32cda3019e8b4a8e7fbc46939d3c9afb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d23c94d9d8e88df5180934bde353142e32cda3019e8b4a8e7fbc46939d3c9afb.exe
Resource
win10v2004-20220901-en
General
-
Target
d23c94d9d8e88df5180934bde353142e32cda3019e8b4a8e7fbc46939d3c9afb
-
Size
18KB
-
MD5
37de6816e38fe8545566256ce265df08
-
SHA1
94c04faae1992f2914c440815918346013489f2e
-
SHA256
d23c94d9d8e88df5180934bde353142e32cda3019e8b4a8e7fbc46939d3c9afb
-
SHA512
7e2f37b72ef6cd73fa960305178d9a271c5c394bdf0f98a0c3fb4aab6cdc59abb89b18abf37b2c0e154b7c53cee1d5b53b53b9f122283fcf2ddf8d83e488009a
-
SSDEEP
192:n/XTSxDXzcNOletumj9PwhCZWvCn4cxcEqmCa9JCAWIGjkogCEIjC+j6n+o:PTSx0UYIOp8pvCn4jAcAW9jC+jvo
Malware Config
Signatures
Files
-
d23c94d9d8e88df5180934bde353142e32cda3019e8b4a8e7fbc46939d3c9afb.exe windows x86
6eecbc854f440c61149ba571f21cec55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenSemaphoreA
IsDebuggerPresent
VirtualProtect
GetCurrentProcess
GetACP
WriteConsoleA
InterlockedExchange
GetCurrentProcessId
LoadLibraryA
DeleteAtom
FormatMessageA
HeapDestroy
GetEnvironmentStringsA
GetCurrentThread
GetTimeFormatA
GetStdHandle
GetThreadPriority
GetModuleHandleA
GetExpandedNameA
HeapCreate
FlushFileBuffers
user32
wsprintfA
ShowWindow
FrameRect
ReleaseDC
ValidateRgn
GetCursorPos
DrawTextA
GetWindowTextLengthA
GetDlgItem
GetParent
EndPaint
GetWindow
IsIconic
GetFocus
GetClassNameA
SetForegroundWindow
FillRect
BeginPaint
SetActiveWindow
advapi32
RegCreateKeyA
RegEnumKeyA
RegQueryInfoKeyA
RegCloseKey
RegFlushKey
uxtheme
GetThemeSysFont
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ