Static task
static1
Behavioral task
behavioral1
Sample
8f6434490080f63f321adb67971ff09d51e7b3023ba36a71c5c8cd98a61c190c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8f6434490080f63f321adb67971ff09d51e7b3023ba36a71c5c8cd98a61c190c.exe
Resource
win10v2004-20220901-en
General
-
Target
8f6434490080f63f321adb67971ff09d51e7b3023ba36a71c5c8cd98a61c190c
-
Size
100KB
-
MD5
b4b717c1a8b37deaa9cf0604652f8668
-
SHA1
2e1477c8d08087148cef4bfdda1eb17f0184b57d
-
SHA256
8f6434490080f63f321adb67971ff09d51e7b3023ba36a71c5c8cd98a61c190c
-
SHA512
56108f535af545a38b5ce2793e0b4856ac62a299340fedf21bda5dc0031d8ee6f92a178e78583989a3c3f397ceaeef57b1dc6cb75be2efdbfa56cba14d232a65
-
SSDEEP
3072:kTXs32qW/3EJAC1MrViClEv7w3RIz+PK6eU4C:kje2qmV1W72RIz+P5P
Malware Config
Signatures
Files
-
8f6434490080f63f321adb67971ff09d51e7b3023ba36a71c5c8cd98a61c190c.exe windows x86
217190828ad9a5b696102277c496c499
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetCurrentProcess
GetModuleHandleA
DeleteFileA
GetTickCount
ReadFile
CreateProcessA
ole32
CoInitialize
user32
MessageBoxA
DispatchMessageA
GetMessageA
CreateWindowExA
ShowWindow
DestroyWindow
DefWindowProcA
SetWindowLongA
GetWindowLongA
UpdateWindow
PostQuitMessage
GetSystemMetrics
advapi32
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
shell32
SHGetMalloc
SHGetSpecialFolderLocation
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ