Static task
static1
Behavioral task
behavioral1
Sample
f8d452f00f6e5ed386bf6cc8ff303004890fb38290e817acc577947a4c0ec755.exe
Resource
win7-20220901-en
General
-
Target
f8d452f00f6e5ed386bf6cc8ff303004890fb38290e817acc577947a4c0ec755
-
Size
385KB
-
MD5
1746c31185ad19a6d258f03a4e1a7f52
-
SHA1
ccc25aeed72baedffc7023370b524efc1d84aaee
-
SHA256
f8d452f00f6e5ed386bf6cc8ff303004890fb38290e817acc577947a4c0ec755
-
SHA512
fd767c0007174be6b92e98ec601c5f46ea12e5860ee95f6cf530a4ce72f44c30313684457560f96011caabf331f65646733f388be3d383079d90385025ce61a5
-
SSDEEP
3072:R79CsTS0zX6riAt3PxQqL9DBRmWIlG0pTKvVZ5x:R9zKDPxQqLzIVm3
Malware Config
Signatures
Files
-
f8d452f00f6e5ed386bf6cc8ff303004890fb38290e817acc577947a4c0ec755.exe windows x86
eba18dd11f7b6e3778fbb589c248d4a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindNextFileA
FindFirstFileA
ReadProcessMemory
GetCurrentProcess
GetProcAddress
GetModuleHandleA
GetCommandLineW
GetModuleHandleW
GetStartupInfoW
user32
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
TranslateMessage
LoadCursorA
LoadIconA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
BeginPaint
DialogBoxParamA
DestroyWindow
DefWindowProcA
EndDialog
DispatchMessageA
RegisterClassExA
msvcrt
strrchr
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sdata Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kwja Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE