Static task
static1
Behavioral task
behavioral1
Sample
c557195a4e7d0cf4eab941c5398505bc5356da775eea1f31564ac1c173c7e16b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c557195a4e7d0cf4eab941c5398505bc5356da775eea1f31564ac1c173c7e16b.exe
Resource
win10v2004-20221111-en
General
-
Target
c557195a4e7d0cf4eab941c5398505bc5356da775eea1f31564ac1c173c7e16b
-
Size
156KB
-
MD5
fbed831c69a48248100c80180f3fff79
-
SHA1
d86483ed4fad74d22f180e93f38337b9d3648737
-
SHA256
c557195a4e7d0cf4eab941c5398505bc5356da775eea1f31564ac1c173c7e16b
-
SHA512
ccca1e1221fff85a5b7c410f4a78c81c9c295aa74b1a56399756cca064db94187ac02b71c880ccd636e0947d5edcfb4a2673b89a372012dbcb4dff15d2a17562
-
SSDEEP
3072:LMdxonf9HdHOByUVzNd8aFyJT//m/U6axwo71LCYC+w1pLZ9OYiL:LMdxuJFQyUtNFebBWwLCR3LZ94
Malware Config
Signatures
Files
-
c557195a4e7d0cf4eab941c5398505bc5356da775eea1f31564ac1c173c7e16b.exe windows x86
5a660f45fd62a78d1c69259c0cdd4311
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CloseHandle
GetCurrentProcess
CreateFileA
LoadLibraryA
ExitProcess
user32
CloseWindow
CreateWindowExA
CharLowerBuffA
SetWindowLongA
wsprintfA
advapi32
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegCloseKey
RegOpenKeyA
RegDeleteValueA
Sections
.text Size: 137KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ