Static task
static1
Behavioral task
behavioral1
Sample
686aff3d8d7281f04e633c3550fc8f21b02874ead7ef9614ff160c87da706905.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
686aff3d8d7281f04e633c3550fc8f21b02874ead7ef9614ff160c87da706905.exe
Resource
win10v2004-20221111-en
General
-
Target
686aff3d8d7281f04e633c3550fc8f21b02874ead7ef9614ff160c87da706905
-
Size
140KB
-
MD5
1631f5c38e9d62161160bc2137549e60
-
SHA1
412ca8b0a36308005c624247f158026db4cfb52b
-
SHA256
686aff3d8d7281f04e633c3550fc8f21b02874ead7ef9614ff160c87da706905
-
SHA512
3c2494cd87fec5468e83bad57b89588eb84cec8ab2acfbd611f9876480cbf01731f589b35c200e901bb8650b3ae63010d6d3a3e76ce1a6a3e033686184168606
-
SSDEEP
3072:tntf23qUYv46YSUgS0Fx1FFS53wvRh5g2V7mzufGtL5Omo+v8BYy1InJ:Nt4xI46ugS0X1LSJkh5gI7mzUML4sv8A
Malware Config
Signatures
Files
-
686aff3d8d7281f04e633c3550fc8f21b02874ead7ef9614ff160c87da706905.exe windows x86
b96e9df96d22e6e6b62f9948ec9fe33b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
LCMapStringA
ExitProcess
CreateFileA
GetCurrentProcess
CloseHandle
user32
wsprintfA
CloseWindow
SetWindowLongA
CharLowerBuffA
CreateWindowExA
advapi32
RegSetValueA
RegEnumValueA
RegQueryValueA
RegDeleteValueA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegCreateKeyA
RegDeleteKeyA
Sections
.text Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ