Static task
static1
Behavioral task
behavioral1
Sample
91ca59d10cd5b706c6b155beee6569d029340b5215320da1a04cfb2992ac7fc6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
91ca59d10cd5b706c6b155beee6569d029340b5215320da1a04cfb2992ac7fc6.exe
Resource
win10v2004-20221111-en
General
-
Target
91ca59d10cd5b706c6b155beee6569d029340b5215320da1a04cfb2992ac7fc6
-
Size
828KB
-
MD5
f71d5999bce84efd4fba8012b2f21931
-
SHA1
a7e5fb578203967313e7bedb8586690b8f2e6099
-
SHA256
91ca59d10cd5b706c6b155beee6569d029340b5215320da1a04cfb2992ac7fc6
-
SHA512
4766c016dbef4414f702bfe4304ab4a6476fe3e3bb832dcda590a466e1858b924670c5bdcf8352a62adae1db25da14ba81ac51f458a20092be2f1e252e63851b
-
SSDEEP
24576:u5ZfTYXjaD1qiJ8wmcz84Sqipi70hJT1XMMMMMMM/SMMMMMMMChE:uUTaD38O84apiG5RMMMMMMMaMMMMMMMh
Malware Config
Signatures
Files
-
91ca59d10cd5b706c6b155beee6569d029340b5215320da1a04cfb2992ac7fc6.exe windows x86
8ca25e6ee54eef1acc582f908eff9539
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
LCMapStringA
ExitProcess
CreateFileA
GetCurrentProcess
LoadLibraryA
user32
CharLowerBuffA
CloseWindow
CreateWindowExA
wsprintfA
SetWindowLongA
advapi32
RegCreateKeyA
RegOpenKeyA
RegSetValueA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyA
RegEnumValueA
RegCloseKey
RegDeleteValueA
Sections
.text Size: 629KB - Virtual size: 632KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 180KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ