g7aWT8J@16
Static task
static1
Behavioral task
behavioral1
Sample
c189f1a4c8ef420826c376b4824b86e74d0eb8bf5d230d6b24674358d3ceebe3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c189f1a4c8ef420826c376b4824b86e74d0eb8bf5d230d6b24674358d3ceebe3.exe
Resource
win10v2004-20220812-en
General
-
Target
c189f1a4c8ef420826c376b4824b86e74d0eb8bf5d230d6b24674358d3ceebe3
-
Size
315KB
-
MD5
4c0baeb51616ce92d5a3c454392a09f2
-
SHA1
6feed635feab965b40471176ce3ca53c6a3afd8c
-
SHA256
c189f1a4c8ef420826c376b4824b86e74d0eb8bf5d230d6b24674358d3ceebe3
-
SHA512
8453aba72d38e565bb0ecff585a6be95979a862584af24e1cc644313909532dee8d0fbfe1860dbd95b93b21e0911a5503d6b809b4ad85d0e3df8d19f054ace19
-
SSDEEP
6144:wasjQEQbCX1NsxvpKperesKGm+PAhgaNMZPOw:ojLHX1WhspereshaNE
Malware Config
Signatures
Files
-
c189f1a4c8ef420826c376b4824b86e74d0eb8bf5d230d6b24674358d3ceebe3.exe windows x86
2765f0487e40ce6e4833fce21cd0c02d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
InsertMenuItemA
IntersectRect
GetDesktopWindow
InsertMenuA
GetMenu
GetWindowTextLengthA
InvalidateRect
GetMenuItemCount
kernel32
lstrlenW
LoadLibraryA
GetThreadLocale
GetCurrentThread
GetCurrentProcess
GetCommandLineW
VirtualAllocEx
ExitProcess
GetCurrentThreadId
msvcrt
wcsncmp
memmove
wcschr
clock
malloc
srand
swprintf
sprintf
wcscspn
wcstol
memset
calloc
rand
oleaut32
OleLoadPicture
SafeArrayPtrOfIndex
Exports
Exports
Sections
CODE Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 10KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tpdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eedata Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ