Static task
static1
Behavioral task
behavioral1
Sample
953d308082d96ed1084333a6435b1af373c5107c79a7eb7a74fab86da6ea5eb6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
953d308082d96ed1084333a6435b1af373c5107c79a7eb7a74fab86da6ea5eb6.exe
Resource
win10v2004-20220812-en
General
-
Target
953d308082d96ed1084333a6435b1af373c5107c79a7eb7a74fab86da6ea5eb6
-
Size
344KB
-
MD5
da890f291ae0732f016ac56064ec7add
-
SHA1
47b8954aabcfdc2bd080569e45162031bfbe804d
-
SHA256
953d308082d96ed1084333a6435b1af373c5107c79a7eb7a74fab86da6ea5eb6
-
SHA512
2fb33a7f4e22a3a99ab8b5cb95c6bd90055d88d41355c9a22c23a1bc10642aab6f25842946f6cf106452c92b3ecb075894b43aba9b7d19a947587966f5c7b78a
-
SSDEEP
6144:QawmDX++OV68m8gLAuRyF9B9U6CcwXyNwUHx74549Vp2TTGH76Izc1Y+X1K:QHG8y9onB9NCZXy9HqEWIz5aK
Malware Config
Signatures
Files
-
953d308082d96ed1084333a6435b1af373c5107c79a7eb7a74fab86da6ea5eb6.exe windows x86
cf6f698be64958ba0d9fc447728989eb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
ExitProcess
CloseHandle
CreateFileA
LoadLibraryA
GetCurrentProcess
user32
SetWindowLongA
CreateWindowExA
CloseWindow
CharLowerBuffA
wsprintfA
advapi32
RegQueryValueA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
RegEnumValueA
RegSetValueA
RegCreateKeyA
RegEnumKeyA
RegDeleteValueA
Sections
.text Size: 320KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ