Static task
static1
Behavioral task
behavioral1
Sample
151d5cdd60efde1f6da70ca53f169580eaf39e58238aa70138100eb5e49c681d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
151d5cdd60efde1f6da70ca53f169580eaf39e58238aa70138100eb5e49c681d.exe
Resource
win10v2004-20220812-en
General
-
Target
151d5cdd60efde1f6da70ca53f169580eaf39e58238aa70138100eb5e49c681d
-
Size
174KB
-
MD5
049b381cf27f1ac3cd778ebf41c94450
-
SHA1
9c0692b4f3e306341274e091b886d54795fe925f
-
SHA256
151d5cdd60efde1f6da70ca53f169580eaf39e58238aa70138100eb5e49c681d
-
SHA512
e1f514c7db8bd7447f02243947aaaa2c48657decfeab005d98d2f6c31fb9cb027ba40fdf87767955ccb4e78b982379a12fbdf300b65ce0356b402905aee7cb5c
-
SSDEEP
3072:dBwSCtFJ8J0VcRikEiTAQvlJ8m3QsamlsK6nYs36l0nB:dCHC+cRiniT9vX8mvpO8VC
Malware Config
Signatures
Files
-
151d5cdd60efde1f6da70ca53f169580eaf39e58238aa70138100eb5e49c681d.exe windows x86
00744a4f9a58e98cfa31628d1dedf57e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_mbscmp
_exit
_adjust_fdiv
__set_app_type
asin
__p___initenv
__p__commode
_except_handler3
_wcsnicmp
__setusermatherr
__p__fmode
_mbsicmp
_initterm
_XcptFilter
_controlfp
__getmainargs
advapi32
CryptReleaseContext
OpenProcessToken
FreeSid
RegCloseKey
RegOpenKeyExW
GetTokenInformation
GetLengthSid
InitializeAcl
RegEnumKeyA
RegCreateKeyExW
kernel32
SetEnvironmentVariableA
VirtualProtectEx
CopyFileA
GetTempFileNameA
GetShortPathNameA
GetVersionExW
SetThreadLocale
FormatMessageA
InterlockedExchange
user32
LoadCursorA
LoadIconA
UnhookWindowsHookEx
RemoveMenu
SendDlgItemMessageA
LoadStringA
SetMenu
DestroyMenu
BeginPaint
EnumThreadWindows
GetTopWindow
GetCursorPos
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 156KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ