Static task
static1
Behavioral task
behavioral1
Sample
419b17ec21adf16d8852ffd3c44769fa0cf53a5cf3e1c5b1c76da2321c05b00d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
419b17ec21adf16d8852ffd3c44769fa0cf53a5cf3e1c5b1c76da2321c05b00d.exe
Resource
win10v2004-20221111-en
General
-
Target
419b17ec21adf16d8852ffd3c44769fa0cf53a5cf3e1c5b1c76da2321c05b00d
-
Size
1.0MB
-
MD5
b7e3d631f4675cf193633b9481cab92e
-
SHA1
2685027599aab9670adce59e1f7af555b1970915
-
SHA256
419b17ec21adf16d8852ffd3c44769fa0cf53a5cf3e1c5b1c76da2321c05b00d
-
SHA512
3fb0d4b634ee68c76ff511b400345d19be1d448b715775077219b3825dfce3c2f030b66d732a1992d28ac96c5cb61ce5c6d32e76302616ff2677ef94553398ac
-
SSDEEP
12288:ZYQOKJ/KYk3MhJ7rlfDtUqPtpF9ChgWIrSi+mj86TjtpixGoeIYacufFTDOys:ZYzs3VwqP9wzIGm86TjfoeIWITs
Malware Config
Signatures
Files
-
419b17ec21adf16d8852ffd3c44769fa0cf53a5cf3e1c5b1c76da2321c05b00d.exe windows x86
ae0a5112fe1176f4e5f6e1bc95e4c209
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 906KB - Virtual size: 906KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE