Static task
static1
Behavioral task
behavioral1
Sample
f2fd85afa41723af999d0bf83871cee5420be2ffae897c9bc0fab4a2482afad4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f2fd85afa41723af999d0bf83871cee5420be2ffae897c9bc0fab4a2482afad4.exe
Resource
win10v2004-20221111-en
General
-
Target
f2fd85afa41723af999d0bf83871cee5420be2ffae897c9bc0fab4a2482afad4
-
Size
47KB
-
MD5
4e67bbcd7357b5b7858abe669270b2f8
-
SHA1
89e2a4768caa8155ed6f87e77e98f69e32e651ca
-
SHA256
f2fd85afa41723af999d0bf83871cee5420be2ffae897c9bc0fab4a2482afad4
-
SHA512
e47db2f2c0feb8afeee2f32a04bbc68d3fcff999ea65b9453a1389b743833912d1f3b0ff5161f461693b375acc19aeb075c45b30bcdb4274e9ec52093662fd9c
-
SSDEEP
384:GDb1Rs21u1wY2LHGM3A0AY44sZPDkeiyPc8JHPbFEtRE:SR5U0D6Y448PDke7PcgHDFEta
Malware Config
Signatures
Files
-
f2fd85afa41723af999d0bf83871cee5420be2ffae897c9bc0fab4a2482afad4.exe windows x86
e73a5ee1b3ff1820abb1125541e355a1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnmapViewOfFile
VirtualAlloc
GetModuleHandleA
lstrlenA
RtlZeroMemory
GetFileSize
ExitProcess
CreateFileMappingA
CloseHandle
MapViewOfFile
CreateFileA
VirtualFree
user32
SetDlgItemTextA
SetWindowTextA
SendMessageA
MessageBoxA
LoadIconA
GetDlgItemTextA
EndDialog
DialogBoxParamA
wsprintfA
GetDlgItem
comctl32
InitCommonControls
comdlg32
GetOpenFileNameA
ccldll
cOffsetToRva
cRvaToOffset
cCheckPE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 870B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 667B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hnxyy Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ