Static task
static1
Behavioral task
behavioral1
Sample
db594b62eee1be1c3d02a4d0af8c5db1bb3679ff47b8b73f0a3dfd6250fe71e5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
db594b62eee1be1c3d02a4d0af8c5db1bb3679ff47b8b73f0a3dfd6250fe71e5.exe
Resource
win10v2004-20221111-en
General
-
Target
db594b62eee1be1c3d02a4d0af8c5db1bb3679ff47b8b73f0a3dfd6250fe71e5
-
Size
51KB
-
MD5
d4677ab3b23ea8a3293838a7a02ed526
-
SHA1
668960f4a6dd4e44122c8c8f9a4e6bd582feb5be
-
SHA256
db594b62eee1be1c3d02a4d0af8c5db1bb3679ff47b8b73f0a3dfd6250fe71e5
-
SHA512
1401ec198e77d38caacc9de3988d878a175550b596670458adf6924aba04a8f813f0db1683c3086ee5f5868bf9ae03bb590360525d5dbee1c6500a8d646dbc49
-
SSDEEP
1536:RBXPwVu4wrQ58Aabn61vBfkygR6DA3Nq:YV351aUvSyY6DONq
Malware Config
Signatures
Files
-
db594b62eee1be1c3d02a4d0af8c5db1bb3679ff47b8b73f0a3dfd6250fe71e5.exe windows x86
573e8bddaef8381b406e5006ddfd82dd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
advapi32
CryptDestroyHash
CryptHashData
RegCreateKeyExA
RegEnumKeyExA
RegSetValueExA
shlwapi
PathFileExistsW
PathRemoveFileSpecW
StrCmpNIA
StrCmpNIW
wnsprintfW
wvnsprintfA
wvnsprintfW
user32
CharLowerBuffA
DispatchMessageA
GetIconInfo
GetKeyboardState
GetKeyState
GetMenuItemID
GetMessageA
LoadCursorA
SendMessageA
Sections
.tmp Size: 42KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ohwx Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lefin Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ