Static task
static1
Behavioral task
behavioral1
Sample
d1a2a1e22c9667d4ff6c4a89a0e43473e79c4d89b4690176361550aaf4352941.exe
Resource
win7-20220331-en
General
-
Target
d1a2a1e22c9667d4ff6c4a89a0e43473e79c4d89b4690176361550aaf4352941
-
Size
47KB
-
MD5
03b7e356bdc47452c7710c566d33b12d
-
SHA1
dd2f19962dadeba05a5299b32343fb37221af0b9
-
SHA256
d1a2a1e22c9667d4ff6c4a89a0e43473e79c4d89b4690176361550aaf4352941
-
SHA512
d77a717048797e9328c7cdc17eba4b32b03c84fabf8530e10dc82b3e7839f1a63487eb5f07eb9bb3aa2451abaeed3ab7b23d866c078f0161b22357e792457166
-
SSDEEP
768:bm3sWWrV3O6r8ExfAF3BF3INUF3G6noj3r/eK4YtQ3Q:S3sW235rnfARBRI+RG6or/eKE3
Malware Config
Signatures
Files
-
d1a2a1e22c9667d4ff6c4a89a0e43473e79c4d89b4690176361550aaf4352941.exe windows x86
9534fcd0f693009c88102eb0630b67fe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
urlmon
HlinkNavigateString
Sections
CODE Size: 16KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE