Static task
static1
Behavioral task
behavioral1
Sample
f434b1a01ca2a6ba07828d103f1f114238427899bde0c5c461ac5297592c0056.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f434b1a01ca2a6ba07828d103f1f114238427899bde0c5c461ac5297592c0056.exe
Resource
win10v2004-20220812-en
General
-
Target
f434b1a01ca2a6ba07828d103f1f114238427899bde0c5c461ac5297592c0056
-
Size
165KB
-
MD5
dddfe40f855a0fb328ce2c49c5d52dca
-
SHA1
770299c5d346b16eec26697130e040ff190649bf
-
SHA256
f434b1a01ca2a6ba07828d103f1f114238427899bde0c5c461ac5297592c0056
-
SHA512
9f856e24ab9250e5a13f87e268a424d46489547b8f0d33131fe0b4bd973fc1626b232c54110fc58114cdea889612e3eeb766a72eee263f936be8247baf0b9759
-
SSDEEP
3072:3t4gJvmYuqqKz/3yCktlCrWZ7i2WpmFJVww62r/gSiUGaScq:3CgtHHSmrW1BJuNas
Malware Config
Signatures
Files
-
f434b1a01ca2a6ba07828d103f1f114238427899bde0c5c461ac5297592c0056.exe windows x86
55f45e53cbc9c3ba17df7a228df993ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Add
ImageList_DrawEx
ImageList_Destroy
ole32
OleRegGetUserType
CoRevokeClassObject
CoGetMalloc
CoRegisterClassObject
CoGetContextToken
kernel32
GetCurrentProcessId
VirtualAllocEx
GetVersionExA
lstrlenW
CreateFileA
GetModuleHandleA
GetACP
GetThreadLocale
GetCommandLineW
ExitProcess
GetProcAddress
GetCommandLineA
LoadLibraryExA
GetStringTypeA
GetOEMCP
comdlg32
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
GetFileTitleA
FindTextA
msvcrt
srand
pow
wcsncmp
advapi32
RegQueryValueExA
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyA
Sections
CODE Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 814B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ