Static task
static1
Behavioral task
behavioral1
Sample
a64f26f0dcb2f4c151f3619579a092beddd04b12219c13d26028550cdcdbcf0d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a64f26f0dcb2f4c151f3619579a092beddd04b12219c13d26028550cdcdbcf0d.exe
Resource
win10v2004-20221111-en
General
-
Target
a64f26f0dcb2f4c151f3619579a092beddd04b12219c13d26028550cdcdbcf0d
-
Size
212KB
-
MD5
1a98f10d0d117abe2856abbe09532d6b
-
SHA1
ebd7b9d3e96320c4caf968b6ffe60324cc200f9e
-
SHA256
a64f26f0dcb2f4c151f3619579a092beddd04b12219c13d26028550cdcdbcf0d
-
SHA512
62f5e3bc2a34f3a658a0d59a85436954694b813e9a6c6ba128db62aca749a4dfbc6cc2416dbdb4696857aca47fa29125275ad7a55780e4ffb7a21f85f9826e45
-
SSDEEP
6144:K3g4S3bw7U9FmTn7f8d9ZSH0fAJOjOJGyTcWd:l46UPX6iy4OjJyoO
Malware Config
Signatures
Files
-
a64f26f0dcb2f4c151f3619579a092beddd04b12219c13d26028550cdcdbcf0d.exe windows x86
c0ad51c1d02c12ff45f9ddbd060f599a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LCMapStringA
GetCurrentProcess
CloseHandle
LoadLibraryA
ExitProcess
user32
SetWindowLongA
CreateWindowExA
CharLowerBuffA
CloseWindow
wsprintfA
advapi32
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegSetValueA
RegOpenKeyA
RegEnumValueA
RegCreateKeyA
Sections
.text Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ