Static task
static1
Behavioral task
behavioral1
Sample
922aeba124375a5095dae9032912dd8704a79525599b4e170bd7d6455749558b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
922aeba124375a5095dae9032912dd8704a79525599b4e170bd7d6455749558b.exe
Resource
win10v2004-20221111-en
General
-
Target
922aeba124375a5095dae9032912dd8704a79525599b4e170bd7d6455749558b
-
Size
52KB
-
MD5
802cb26661e4800fc7d0b0ef08d48632
-
SHA1
5ab6f5b51561cf66f5a3fb7d85df6fc42dd5a338
-
SHA256
922aeba124375a5095dae9032912dd8704a79525599b4e170bd7d6455749558b
-
SHA512
4699685e79cb634757532b123dc95ff4c274e5b5d734b695f2299397dec9cacfa6d62ce3866574c397d79b8c3b15ebf1d0996dc2e00b003abe6c074b79f782a9
-
SSDEEP
768:JzyY3vJMab7CiEntOBcdZUcCHDC/ndQQTp0bSXgipBEv:YWvmab7nEntLOcCHu/nqQ9hNcv
Malware Config
Signatures
Files
-
922aeba124375a5095dae9032912dd8704a79525599b4e170bd7d6455749558b.exe windows x86
6d5d4393a00b78fbadb0ef81c7519719
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomW
SystemTimeToFileTime
GetVersionExA
lstrcpynA
CompareStringA
GetModuleHandleW
lstrlenW
IsDebuggerPresent
SetEvent
GetModuleFileNameA
OpenMutexW
OpenEventA
FatalAppExitW
GetVersionExW
GetCommandLineA
ConnectNamedPipe
GetDateFormatW
GetVersion
LoadLibraryA
WaitForMultipleObjects
GetCurrentProcessId
user32
GetWindowTextLengthW
GetWindowRgn
PeekMessageW
EnumWindows
GetKeyboardLayout
GetKeyboardType
DefWindowProcA
RegisterClassExW
CharPrevW
LoadIconW
GetClassLongA
SetWindowTextA
ReleaseDC
InsertMenuItemW
SetDlgItemInt
GetActiveWindow
MessageBoxA
UnregisterClassA
UpdateLayeredWindow
gdi32
CreateFontIndirectA
SetPixel
GetDIBits
LineTo
CreateBrushIndirect
CreateDIBSection
advapi32
RegSaveKeyA
RegOpenKeyExA
comdlg32
ChooseFontW
shell32
StrChrIW
SHBrowseForFolderW
StrChrW
SHGetFolderPathW
SHCreateDirectoryExA
ole32
CoCreateInstance
CoInitializeEx
CoGetMalloc
version
VerLanguageNameW
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ