Static task
static1
Behavioral task
behavioral1
Sample
59cc3dcd75e8b250480c709764d37c6328b7a85f0016bae1d403ef6a85bc71a3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
59cc3dcd75e8b250480c709764d37c6328b7a85f0016bae1d403ef6a85bc71a3.exe
Resource
win10v2004-20220812-en
General
-
Target
59cc3dcd75e8b250480c709764d37c6328b7a85f0016bae1d403ef6a85bc71a3
-
Size
230KB
-
MD5
bfa4318a10b34d0b47cad55671461350
-
SHA1
84dc3eda9551d88ecccae7df79084c6ea5e3245c
-
SHA256
59cc3dcd75e8b250480c709764d37c6328b7a85f0016bae1d403ef6a85bc71a3
-
SHA512
19bd2aef2145c2f6c84f7f3d42524bc775b8e93fc70656f35a916eb93c642027918f1b1cb009ec82358b2adc911562b04a8ba831f6bc9a9cab4a4aed8c8fb81a
-
SSDEEP
6144:NtSzDVZ9mKejIZ2vICqOK1RurBMwZSJ3Y/LqDgyKkiuPYBxUd5kh9:Ngl+Ke0xBPAnq7KKsxU7K
Malware Config
Signatures
Files
-
59cc3dcd75e8b250480c709764d37c6328b7a85f0016bae1d403ef6a85bc71a3.exe windows x86
10ec2e2888449106b79c058347dff8bc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsCharAlphaW
EnumChildWindows
MoveWindow
SetWindowTextA
IsCharLowerA
GetDesktopWindow
DialogBoxParamA
SetWindowLongW
GetActiveWindow
ole32
CoRevokeClassObject
CoEnableCallCancellation
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
kernel32
GetStartupInfoA
GetTickCount
HeapDestroy
HeapFree
SizeofResource
SetFileAttributesA
GetTimeZoneInformation
LocalAlloc
SuspendThread
LoadResource
FindResourceExA
GetDateFormatA
LoadLibraryA
FreeLibrary
GetProcAddress
DeleteCriticalSection
InitializeCriticalSection
LocalFree
IsBadStringPtrW
HeapCreate
Sections
.text Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ