Static task
static1
Behavioral task
behavioral1
Sample
43df8bf55cac607dee8f0469c11d9e4279f6610b936bd26f2ff43ef510752cf5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
43df8bf55cac607dee8f0469c11d9e4279f6610b936bd26f2ff43ef510752cf5.exe
Resource
win10v2004-20221111-en
General
-
Target
43df8bf55cac607dee8f0469c11d9e4279f6610b936bd26f2ff43ef510752cf5
-
Size
51KB
-
MD5
996398267968f18d6677354bb0b7c78d
-
SHA1
6f7a0769a23d6ac0a797b0619dbe8acb82987df4
-
SHA256
43df8bf55cac607dee8f0469c11d9e4279f6610b936bd26f2ff43ef510752cf5
-
SHA512
9d6fdc408a6a54d58e6d654cb6ff3d2af701116cc816f2f55d6edd577601978cfb23e8e4ec4f692aeb7f969af07400082e2eb4cc000596b2110a8ab2eb0a27a4
-
SSDEEP
1536:drfAlvgaiXEDqnYLI5H0agWizshRarQp:ZmiJnYUBXp
Malware Config
Signatures
Files
-
43df8bf55cac607dee8f0469c11d9e4279f6610b936bd26f2ff43ef510752cf5.exe windows x86
c58090111f17e84fba9a08d9f0cd69ea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
advapi32
CryptDestroyHash
GetUserNameW
RegCreateKeyExA
RegEnumKeyExA
RegSetValueExA
shlwapi
PathCombineW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW
user32
CharLowerBuffA
DrawIcon
EndDialog
GetForegroundWindow
GetKeyState
GetMenuItemID
MsgWaitForMultipleObjects
OpenWindowStationA
PeekMessageA
SetProcessWindowStation
SetThreadDesktop
Sections
.qtwlar Size: 42KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ngt Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bobmb Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ