Static task
static1
Behavioral task
behavioral1
Sample
ba6da734aa4f4d2111c3e9c851e910f0b1c1473fc2eb29c5d4ca68ecf674d36d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba6da734aa4f4d2111c3e9c851e910f0b1c1473fc2eb29c5d4ca68ecf674d36d.exe
Resource
win10v2004-20221111-en
General
-
Target
ba6da734aa4f4d2111c3e9c851e910f0b1c1473fc2eb29c5d4ca68ecf674d36d
-
Size
128KB
-
MD5
1ef77387df4f6d40c6bf921099ac3740
-
SHA1
59adb77cd852b26b14ad3b6809dae6790d56aa2f
-
SHA256
ba6da734aa4f4d2111c3e9c851e910f0b1c1473fc2eb29c5d4ca68ecf674d36d
-
SHA512
12ad5c0392c17521bec84db74c8ccf72569ebecb06e095392dff6854c53553f9ed31ebb2b093e23ebc6cdcba0376266813a36f5add4765515482be1443e2590f
-
SSDEEP
1536:PMzLhp7QnPAVF8H8ZhgEMT2KC3C/BpoCiDJsI2jYzMhFZLNHrjTK/CpBjcNjK4Cg:PMn8nPAvqzjwzkuO0p
Malware Config
Signatures
Files
-
ba6da734aa4f4d2111c3e9c851e910f0b1c1473fc2eb29c5d4ca68ecf674d36d.exe windows x86
ae0a5112fe1176f4e5f6e1bc95e4c209
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE