Static task
static1
Behavioral task
behavioral1
Sample
c83cf549648cf0524400151d1ec7d8e0640c0323c5c68b02099e7471177a116f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c83cf549648cf0524400151d1ec7d8e0640c0323c5c68b02099e7471177a116f.exe
Resource
win10v2004-20220812-en
General
-
Target
c83cf549648cf0524400151d1ec7d8e0640c0323c5c68b02099e7471177a116f
-
Size
288KB
-
MD5
fcab5be42962bb689899a8206b865cf6
-
SHA1
b70388972b78068d95793c9386dc08e677cb4280
-
SHA256
c83cf549648cf0524400151d1ec7d8e0640c0323c5c68b02099e7471177a116f
-
SHA512
82228f497ccaf05202338d57c0493bb5339465e787d3358f9287d4a57535776edd9d8d97c2aefdf7082dd1fb8b1b270a05727a7c003a7c17d4e9eb30d586ba01
-
SSDEEP
6144:s9Omf4DhhEmDnKr/84pe/HW3nYuV44N8InXpZ3eBt/3ftjNtaglFiZmowT:s+hh1I84AO3VV4mZtmJ3bldNT
Malware Config
Signatures
Files
-
c83cf549648cf0524400151d1ec7d8e0640c0323c5c68b02099e7471177a116f.exe windows x86
36c9d67514ec2e7010c49990cf5cb972
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
CreateFileA
ExitProcess
GetCurrentProcess
LoadLibraryA
LCMapStringA
user32
SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
CreateWindowExA
advapi32
RegSetValueA
RegCreateKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegEnumValueA
Sections
.text Size: 269KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ