Static task
static1
Behavioral task
behavioral1
Sample
b780f18b33559767abe9b1283b6e2e7c6b043b8196007607f380c6b7990dc70b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b780f18b33559767abe9b1283b6e2e7c6b043b8196007607f380c6b7990dc70b.exe
Resource
win10v2004-20221111-en
General
-
Target
b780f18b33559767abe9b1283b6e2e7c6b043b8196007607f380c6b7990dc70b
-
Size
184KB
-
MD5
075427c8d5826185c925aeaab97526f5
-
SHA1
60655335e060d2d1b28d9904b0b6a46cb775aba2
-
SHA256
b780f18b33559767abe9b1283b6e2e7c6b043b8196007607f380c6b7990dc70b
-
SHA512
aa7b1921631168c605a5ed8eb1db52dbff1795c66d79ab8540fe726e8959cb5007f4352144307f04aa3fc03038c3c9324f7479fa49941155bbab4ce95a41580b
-
SSDEEP
3072:A21GOcfWoGHM0hJH4h0sKxjNaU2jw5w2BTeNw9J+XmjnrOA4I3MC6ThP:vwas0hyusKAUpMNwlr/vMpThP
Malware Config
Signatures
Files
-
b780f18b33559767abe9b1283b6e2e7c6b043b8196007607f380c6b7990dc70b.exe windows x86
a14129ebe0d24bbf15a2ade8581aacc7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
CreateFileA
LCMapStringA
LoadLibraryA
ExitProcess
user32
CloseWindow
CreateWindowExA
wsprintfA
CharLowerBuffA
SetWindowLongA
advapi32
RegCreateKeyA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
RegEnumValueA
RegSetValueA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
Sections
.text Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ