Static task
static1
Behavioral task
behavioral1
Sample
947194eb8c6eacd713bc13c52b99659ae5529b00d81143d51503b24fced185a7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
947194eb8c6eacd713bc13c52b99659ae5529b00d81143d51503b24fced185a7.exe
Resource
win10v2004-20221111-en
General
-
Target
947194eb8c6eacd713bc13c52b99659ae5529b00d81143d51503b24fced185a7
-
Size
101KB
-
MD5
52687ac83ba9485105d92211d1b11789
-
SHA1
ac9e4ee99d618b3c55a844f8a2bd9784c2a94d4d
-
SHA256
947194eb8c6eacd713bc13c52b99659ae5529b00d81143d51503b24fced185a7
-
SHA512
bf7c9063454e1221f71cbec433810e543478653d945500efdbca66439e872526cc1ec54264c01b1bbd3a728d90c832072d61d07652cd13df7c6389755c3b3152
-
SSDEEP
1536:sOsJitAP83M3LcqFVYTRaraDuyuzDyFeakjMpOuHq81Ckdqw/Z4Ro3:sOjtAU3M3LcqFbbyMDySjkO6qXfU4Y
Malware Config
Signatures
Files
-
947194eb8c6eacd713bc13c52b99659ae5529b00d81143d51503b24fced185a7.exe windows x86
9d9f90f2c050b7661ab325f876ba09e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GetTickCount
GetModuleHandleA
SetFilePointer
MultiByteToWideChar
IsBadReadPtr
GetWindowsDirectoryA
GetCurrentProcess
GetModuleFileNameA
DeleteFileA
ole32
OleSetContainedObject
OleCreate
CoInitialize
CoUninitialize
user32
GetSystemMetrics
MessageBoxA
SetWindowLongA
PostQuitMessage
GetMessageA
TranslateMessage
ShowWindow
DispatchMessageA
UpdateWindow
DestroyWindow
DefWindowProcA
CreateWindowExA
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegDeleteValueA
shell32
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ