Static task
static1
Behavioral task
behavioral1
Sample
f1e268623ecccae56224f0a6abd13afd7593b083b888f066123b227a85754217.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f1e268623ecccae56224f0a6abd13afd7593b083b888f066123b227a85754217.exe
Resource
win10v2004-20221111-en
General
-
Target
f1e268623ecccae56224f0a6abd13afd7593b083b888f066123b227a85754217
-
Size
229KB
-
MD5
a346ec977f8fdd102d454ad99053f4ba
-
SHA1
3a796c4e8131c23c842ca18e5e4afd8fab7ee8ec
-
SHA256
f1e268623ecccae56224f0a6abd13afd7593b083b888f066123b227a85754217
-
SHA512
e230e7dd6e8d1dbe791f0ff98f63699fe691ff6cc5a1fd611a93c4a4decdaaccb2f82a2edbf79a250d5872e8485add624caa515623e196943eec192fdc4c8a70
-
SSDEEP
6144:G9D36gXepByYD8UgaDLUF5GEqN+8E/wlzfrp+q75nZMgKE:M31XenXDf3nUmHN+8EczzbnGgf
Malware Config
Signatures
Files
-
f1e268623ecccae56224f0a6abd13afd7593b083b888f066123b227a85754217.exe windows x86
cfcc212f33c23f7826fc043383340dd4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
SaveDC
ole32
OleDraw
comctl32
ImageList_Add
winmm
timeGetTime
Sections
.MPRESS1 Size: 221KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE