Static task
static1
Behavioral task
behavioral1
Sample
c24b27b87aa5da25c333902502b6de308b4ea0b3994a8da4536c5835006fe138.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c24b27b87aa5da25c333902502b6de308b4ea0b3994a8da4536c5835006fe138.exe
Resource
win10v2004-20221111-en
General
-
Target
c24b27b87aa5da25c333902502b6de308b4ea0b3994a8da4536c5835006fe138
-
Size
4.2MB
-
MD5
a9acc4406115974791402ec7196b32b5
-
SHA1
2ff15cd3863619da310fcfa61865797b9e9bd2bc
-
SHA256
c24b27b87aa5da25c333902502b6de308b4ea0b3994a8da4536c5835006fe138
-
SHA512
31ae6c27cf9a4b44db591e1d6751f94d69e646182585f1574735dc7a82265d530f5588d0c1d1b082a6b7499cd2578cc626400f865f65a9a1f7025f046c68b987
-
SSDEEP
98304:mdzKKW5FVHVGNigGYA34e/vD1IGBCrtIGDtDgzQOerGs:gKKW5F1VGig5AoWDyQctIGDZYQHrGs
Malware Config
Signatures
Files
-
c24b27b87aa5da25c333902502b6de308b4ea0b3994a8da4536c5835006fe138.exe windows x86
26ffb83ac8bb09891db2b49cadfb3cc1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
OutputDebugStringA
user32
MessageBoxA
advapi32
RegOpenKeyExA
Sections
0000001 Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000002 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000003 Size: 24KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000004 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 134KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
0000006 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000007 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0000008 Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE