Static task
static1
Behavioral task
behavioral1
Sample
f1bf59ab4c06164cd3fe9927994e212a2777f5f3a7ac1d7ae225784b988228b9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f1bf59ab4c06164cd3fe9927994e212a2777f5f3a7ac1d7ae225784b988228b9.exe
Resource
win10v2004-20220812-en
General
-
Target
f1bf59ab4c06164cd3fe9927994e212a2777f5f3a7ac1d7ae225784b988228b9
-
Size
196KB
-
MD5
b8b31113e6d138ef846671bc9ba079a7
-
SHA1
280e7b676642eedd67f637f3a7872d7a78f780de
-
SHA256
f1bf59ab4c06164cd3fe9927994e212a2777f5f3a7ac1d7ae225784b988228b9
-
SHA512
68e4bf3cc73ea3931ea7f283051b51355f025c6290f6be082690772c3da9d2f9d33aab4ad15055fb9d0263168458be02f7e576d15ecdbb69a049c5d0ef7e271d
-
SSDEEP
6144:z8V573INCGCPDGQZzRse6FF4V81hbwvdaPH7:z8Vp3IyP6QEbFR7n
Malware Config
Signatures
Files
-
f1bf59ab4c06164cd3fe9927994e212a2777f5f3a7ac1d7ae225784b988228b9.exe windows x86
b97fb70ba4aff88a742c94235e58b4b9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LCMapStringA
CloseHandle
CreateFileA
LoadLibraryA
ExitProcess
user32
CharLowerBuffA
CreateWindowExA
wsprintfA
CloseWindow
SetWindowLongA
advapi32
RegEnumValueA
RegDeleteKeyA
RegDeleteValueA
RegQueryValueA
RegCreateKeyA
RegSetValueA
RegEnumKeyA
RegOpenKeyA
RegCloseKey
Sections
.text Size: 179KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ