Static task
static1
Behavioral task
behavioral1
Sample
f7e7d14fcd61ed9738bf247f1bf6a4b18c4f5e604d5701e70308a392650becd3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f7e7d14fcd61ed9738bf247f1bf6a4b18c4f5e604d5701e70308a392650becd3.exe
Resource
win10v2004-20221111-en
General
-
Target
f7e7d14fcd61ed9738bf247f1bf6a4b18c4f5e604d5701e70308a392650becd3
-
Size
172KB
-
MD5
d7763589f710a8aab4d2dd419b40ae97
-
SHA1
938c534051a7b99b1d1361f6a9f173de59477538
-
SHA256
f7e7d14fcd61ed9738bf247f1bf6a4b18c4f5e604d5701e70308a392650becd3
-
SHA512
72a15cfe59a27320b27d76f6541ce0a43d5d11365078c85ea5b8af4b005021be59ac293190ec47aab3c15288ad852a5fb931d772421852e87c63a78569772cff
-
SSDEEP
3072:EEkzZTipDXMb3YJ2mT6K/+QVkeYEd7ZzkrcUpiynGNLmIXqThML:EzTips62izDkeYEHkcUpELmIX8hM
Malware Config
Signatures
Files
-
f7e7d14fcd61ed9738bf247f1bf6a4b18c4f5e604d5701e70308a392650becd3.exe windows x86
21237e4b74e45e5575c454f9728cd245
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LCMapStringA
LoadLibraryA
GetCurrentProcess
CloseHandle
ExitProcess
user32
SetWindowLongA
CharLowerBuffA
CreateWindowExA
CloseWindow
wsprintfA
advapi32
RegEnumValueA
RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegSetValueA
RegDeleteKeyA
RegCreateKeyA
RegQueryValueA
RegOpenKeyA
Sections
.text Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ