Static task
static1
Behavioral task
behavioral1
Sample
f8c794f4be286f178de31e4913fd101a109b47b4528c0d7653b250356c6b9cf3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f8c794f4be286f178de31e4913fd101a109b47b4528c0d7653b250356c6b9cf3.exe
Resource
win10v2004-20221111-en
General
-
Target
f8c794f4be286f178de31e4913fd101a109b47b4528c0d7653b250356c6b9cf3
-
Size
182KB
-
MD5
f9ad489c3b22ff779443e7d220f65643
-
SHA1
55a93aa8a381c46c21c16c64c28c9e32e428f320
-
SHA256
f8c794f4be286f178de31e4913fd101a109b47b4528c0d7653b250356c6b9cf3
-
SHA512
71cff180c2c94ff47a89f9bb2c04be35e108b782c5ba224e3d059c55e46325b9dd0ae65d96ea43fd6c6baba79e6eda882e9dcd085851e1a78d31e6e544adba7a
-
SSDEEP
3072:7Rkz9YzTUkPlF8+4XxENZHMoOMrDM3rApd4QRU87UdSrbDpFSv1TdMSSgx0gHUcR:7RIYnPlFmaMAIZ98AdSrbSZdjfL91qPq
Malware Config
Signatures
Files
-
f8c794f4be286f178de31e4913fd101a109b47b4528c0d7653b250356c6b9cf3.exe windows x86
efb7558498f60084e36114301d07260f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyA
RegCloseKey
RegEnumKeyExA
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
kernel32
VirtualAllocEx
lstrlenA
GetSystemTimeAsFileTime
LocalAlloc
EnumResourceNamesA
RaiseException
CreateProcessA
WideCharToMultiByte
OpenSemaphoreW
MultiByteToWideChar
InterlockedExchange
shlwapi
PathFileExistsW
rpcrt4
NdrFixedArrayFree
UuidCreate
shell32
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ