Static task
static1
Behavioral task
behavioral1
Sample
a28ae937ef80958108fcbc63e34a68ec0c952941f38caeba57890d4cb657dc16.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a28ae937ef80958108fcbc63e34a68ec0c952941f38caeba57890d4cb657dc16.exe
Resource
win10v2004-20221111-en
General
-
Target
a28ae937ef80958108fcbc63e34a68ec0c952941f38caeba57890d4cb657dc16
-
Size
165KB
-
MD5
567a85aba5f00f9bc54fb71fa1786f75
-
SHA1
5d9764d1ceb551e78f8eed4439a64d42e11bbe73
-
SHA256
a28ae937ef80958108fcbc63e34a68ec0c952941f38caeba57890d4cb657dc16
-
SHA512
c7490d76a6c1407ea9cfe8342eaef3f8dd372005cd735d6579345b1a07f885290c363f8b66f6edd18b0652cecedbe45f916ee5ef9d06571edb28179b3ee5a7c2
-
SSDEEP
3072:9/wEAxv2AEJtSr6ds7+/21QLzUw0Km3rvG+j60Iqu/kT3R8j3RqMpM:RGEJtri+/rUwC7vG+j7xu8T3MqMW
Malware Config
Signatures
Files
-
a28ae937ef80958108fcbc63e34a68ec0c952941f38caeba57890d4cb657dc16.exe windows x86
7caf738415904567769ae34afa0fa619
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
ExitProcess
CloseHandle
LoadLibraryA
LCMapStringA
GetCurrentProcess
user32
CreateWindowExA
CloseWindow
wsprintfA
CharLowerBuffA
SetWindowLongA
advapi32
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumValueA
RegSetValueA
RegQueryValueA
RegCloseKey
RegOpenKeyA
RegCreateKeyA
Sections
.text Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ