Static task
static1
Behavioral task
behavioral1
Sample
b325dfa299f5c204aa56eb86710ca82ec276bbe17aa9b284a346d620bf0a485e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b325dfa299f5c204aa56eb86710ca82ec276bbe17aa9b284a346d620bf0a485e.exe
Resource
win10v2004-20221111-en
General
-
Target
b325dfa299f5c204aa56eb86710ca82ec276bbe17aa9b284a346d620bf0a485e
-
Size
3.1MB
-
MD5
932a28a24c9925f21ff33521b1417ee6
-
SHA1
80906fbb1fa357075ecd4e9e564734b469f6aeca
-
SHA256
b325dfa299f5c204aa56eb86710ca82ec276bbe17aa9b284a346d620bf0a485e
-
SHA512
1b4020f92fa75057e4649368a7321c2102e45d4bc8f8e04703b6e6ff9cef4bd86063dbaacd3a72d9c9a4a4260a6b24616f040fc889544d07eeb30ef830de1f71
-
SSDEEP
49152:E/ta9lEFYaxAUB03qoXZDDH/roXhCuYIdImaUPzlRGMjDRbB51eHYMZPpY:EOiJBSDHDoXhCuYI9rMTY
Malware Config
Signatures
Files
-
b325dfa299f5c204aa56eb86710ca82ec276bbe17aa9b284a346d620bf0a485e.exe windows x86
346e58f7142cc1f959a049e11218ae68
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
RtlUnwind
CreateFileA
CloseHandle
LCMapStringA
user32
CharLowerBuffA
CreateWindowExA
SetWindowLongA
wsprintfA
advapi32
RegEnumValueA
RegCreateKeyA
RegSetValueA
RegQueryValueA
ole32
CoGetClassObject
CoInitialize
CoCreateInstanceEx
OleRun
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 396KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 480KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 68KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE