?InsertCustomData@@YGKXZ
Static task
static1
Behavioral task
behavioral1
Sample
b20c52c15ad260312d6e23bc5c864f07e6cc77316ca15649ed9484362c3de6cc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b20c52c15ad260312d6e23bc5c864f07e6cc77316ca15649ed9484362c3de6cc.exe
Resource
win10v2004-20221111-en
General
-
Target
b20c52c15ad260312d6e23bc5c864f07e6cc77316ca15649ed9484362c3de6cc
-
Size
113KB
-
MD5
d6469c51e8f413e834296189c848050d
-
SHA1
03bfc3616b2db749351aedae1b843138af4831c3
-
SHA256
b20c52c15ad260312d6e23bc5c864f07e6cc77316ca15649ed9484362c3de6cc
-
SHA512
ab6396fcc2426e604bc73ab874c1bfbf8e74ddf5ff30ff4d8e3611723a07aa761b4b2096dd62e533d3cc27b049e5c6b10b7b4d6e9b0dd951f04175100533995d
-
SSDEEP
3072:Ppi4UPj/W+CSwr69s1wlyFqS9Egxh0d/FD4iB1:RoyNXGJlC99Egv0BFj1
Malware Config
Signatures
Files
-
b20c52c15ad260312d6e23bc5c864f07e6cc77316ca15649ed9484362c3de6cc.exe windows x86
65f1779b686361b65fa2914474ac66e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryA
EnumResourceTypesA
GetFileInformationByHandle
FlushFileBuffers
WaitForSingleObjectEx
EnumSystemLocalesA
HeapAlloc
shlwapi
PathUnquoteSpacesW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
user32
GetForegroundWindow
MessageBoxW
KillTimer
CheckRadioButton
ntdll
RtlCaptureContext
Exports
Exports
Sections
.text Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ