Static task
static1
Behavioral task
behavioral1
Sample
ba8272238ae9410784b4e3a0852ed5971d7e756cb2d81bb43ec6fe40224ce618.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ba8272238ae9410784b4e3a0852ed5971d7e756cb2d81bb43ec6fe40224ce618.exe
Resource
win10v2004-20220812-en
General
-
Target
ba8272238ae9410784b4e3a0852ed5971d7e756cb2d81bb43ec6fe40224ce618
-
Size
305KB
-
MD5
c7e9f805fb3e39dd3a6318ac40732781
-
SHA1
5dbe0e5cffe4954b22fd297a89d32a62b3204dc5
-
SHA256
ba8272238ae9410784b4e3a0852ed5971d7e756cb2d81bb43ec6fe40224ce618
-
SHA512
14bc852fc2b9b45e4c0a5c256d7e6c26c91d808f2d0fe99e988efcbca6c6c43542940417bf60c4e0d111cd399f4af4c7b6382b7e5bbcab69a0198f315b16291c
-
SSDEEP
6144:LpcQ37r3v3wfHMfyDGpQg4IPX4Tqt3izk/tlV/LlNDKFGIMYU9m:Lpcqr3vgfsf0a14TqtSzEzVH2AyEm
Malware Config
Signatures
Files
-
ba8272238ae9410784b4e3a0852ed5971d7e756cb2d81bb43ec6fe40224ce618.exe windows x86
b3e31288ed8cefb68f3a1070b11f07df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringA
ReleaseMutex
HeapCreate
GetEnvironmentVariableW
GetCurrentProcessId
WriteFile
FindClose
InitializeCriticalSection
GlobalFlags
lstrlenW
GetFileTime
CreateEventW
GetDriveTypeA
IsBadStringPtrW
LocalFree
CloseHandle
TlsGetValue
LoadLibraryW
ReleaseMutex
GetCurrentThreadId
user32
GetClassInfoA
IsWindow
CreateWindowExA
GetSysColor
DrawStateW
GetKeyboardType
SetFocus
EndDialog
GetSysColor
DrawTextA
CallWindowProcW
GetClientRect
DispatchMessageA
qcliprov
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
advapi32
InitializeSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ