Static task
static1
Behavioral task
behavioral1
Sample
b6a4d66f0d60516594172f35c98e233cef651ed86c5131490a4f6380624c2897.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b6a4d66f0d60516594172f35c98e233cef651ed86c5131490a4f6380624c2897.exe
Resource
win10v2004-20221111-en
General
-
Target
b6a4d66f0d60516594172f35c98e233cef651ed86c5131490a4f6380624c2897
-
Size
185KB
-
MD5
13adb2cead84eaf64304222ff735f71f
-
SHA1
27b438c4a49aac389e4536f27fc503aaa0953284
-
SHA256
b6a4d66f0d60516594172f35c98e233cef651ed86c5131490a4f6380624c2897
-
SHA512
6c344f9a8dbcac1780e687204e75375ebfd3cefe8c564210d8c72d7bed5356be2884295ea85d86cd9591e65a6577a67dd80569fc3bc2cd1a9987a15c364c49a1
-
SSDEEP
3072:MoOyhKgIjncN9vkz+sWqz+HxMh+cpkcXGt7T8vkqrHvmGpNS/4dJSNWexcqcFrWd:MaXIrc/k6zqz+Hw+cp5Gt7TCFpA4BokO
Malware Config
Signatures
Files
-
b6a4d66f0d60516594172f35c98e233cef651ed86c5131490a4f6380624c2897.exe windows x86
7b834d798ab9187c94d258e387d48a50
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
ExitProcess
CreateFileA
CloseHandle
LCMapStringA
LoadLibraryA
user32
SetWindowLongA
CreateWindowExA
wsprintfA
CloseWindow
CharLowerBuffA
advapi32
RegCreateKeyA
RegDeleteValueA
RegEnumKeyA
RegCloseKey
RegSetValueA
RegQueryValueA
RegEnumValueA
RegOpenKeyA
RegDeleteKeyA
Sections
.text Size: 143KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ