Static task
static1
Behavioral task
behavioral1
Sample
797112cb8a8ad93febdebe7a10b4d12e082235078e3663590f35b2f82e8deffa.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
797112cb8a8ad93febdebe7a10b4d12e082235078e3663590f35b2f82e8deffa.exe
Resource
win10v2004-20221111-en
General
-
Target
797112cb8a8ad93febdebe7a10b4d12e082235078e3663590f35b2f82e8deffa
-
Size
182KB
-
MD5
0c6914faed428b00a11c9af3bce8ac30
-
SHA1
bc9400edf96540e0a4c8e7f84c340a5b2c7356f0
-
SHA256
797112cb8a8ad93febdebe7a10b4d12e082235078e3663590f35b2f82e8deffa
-
SHA512
7cba48e97e8e022e17b026912c440b36d31413e6e6ace6d0bd982be00107c0e40e2bd519067b9169d5709330f22d335226d75312a43b1e0026f0153efc43c2fd
-
SSDEEP
3072:1biKzuD4oX9ml63s/ZxgZCUxvSX6IlqumBvLA/nnopxndU:c8u469mlGEZxgZm6IlqugzAO0
Malware Config
Signatures
Files
-
797112cb8a8ad93febdebe7a10b4d12e082235078e3663590f35b2f82e8deffa.exe windows x86
67ffc28515d63b3260b97a8ada0d0c60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
InterlockedExchange
HeapDestroy
lstrcpyA
HeapCreate
GetModuleHandleA
GetLastError
HeapAlloc
GetCurrentProcessId
GetProcessHeap
HeapSize
GetCurrentThreadId
GetDriveTypeA
user32
ReleaseDC
FillRect
GetSysColor
ScreenToClient
GetDC
gdi32
GetDeviceCaps
SetBkColor
DeleteObject
DeleteDC
SetTextColor
SelectObject
oleaut32
VariantChangeType
VariantCopy
VariantInit
VariantClear
VarUI4FromStr
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 782B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ