Static task
static1
Behavioral task
behavioral1
Sample
f2e25531ca973361547b7a3225048edf47337557ebae71ff4297bb143386baf2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f2e25531ca973361547b7a3225048edf47337557ebae71ff4297bb143386baf2.exe
Resource
win10v2004-20220812-en
General
-
Target
f2e25531ca973361547b7a3225048edf47337557ebae71ff4297bb143386baf2
-
Size
239KB
-
MD5
2b0f64b69ac55eae80420fe2f98e9380
-
SHA1
c49bb9b8fd0ffe336b5d052cbbb53e7cebcafa4d
-
SHA256
f2e25531ca973361547b7a3225048edf47337557ebae71ff4297bb143386baf2
-
SHA512
e154342b6f3b883b99519f2674471ba7da2734962607c8708eaf5d79350dfb5445fb8c4abb9a9d043504d14e54b9b2e717444e01a6b1b1d688baeb75a9cc0b6c
-
SSDEEP
3072:VgC/u82dCQ3+qld4XEtVhy08IQ5Fmc+sD78mTpRdtspCwIDbqt0zo48FIqd+CDHY:VfW8cIaS5DT33TpOD+mO8GqxLfaXSS1
Malware Config
Signatures
Files
-
f2e25531ca973361547b7a3225048edf47337557ebae71ff4297bb143386baf2.exe windows x86
b8e0a65f7058554d5b7484be228b1876
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegQueryValueW
RegSetValueW
kernel32
CloseHandle
ExitProcess
LeaveCriticalSection
SetUnhandledExceptionFilter
TerminateProcess
TlsFree
TlsGetValue
TlsSetValue
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
memcpy
signal
strcpy
wcscpy
user32
AppendMenuW
ClientToScreen
CreateMenu
DefMDIChildProcW
DefWindowProcW
DeferWindowPos
DestroyMenu
DestroyWindow
DrawFrameControl
DrawStateW
EnableWindow
EndDeferWindowPos
EndPaint
ExitWindowsEx
GetClipboardData
GetDC
GetDlgItem
GetMenuItemCount
GetMenuStringW
GetMessageW
GetScrollInfo
GetSystemMetrics
GetWindow
GetWindowLongW
InflateRect
LoadIconW
LoadImageW
MessageBeep
MessageBoxW
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
OpenClipboard
RegisterClassW
SendMessageW
SetForegroundWindow
SetWindowTextW
SetWindowsHookExW
TrackPopupMenu
TranslateAcceleratorW
UnregisterClassW
UnregisterHotKey
UpdateWindow
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 238KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ