Static task
static1
Behavioral task
behavioral1
Sample
d4854532e499961c6a9af5138917bfa5cad4ccc8fad37c009f8592d66eea5eae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4854532e499961c6a9af5138917bfa5cad4ccc8fad37c009f8592d66eea5eae.exe
Resource
win10v2004-20220812-en
General
-
Target
d4854532e499961c6a9af5138917bfa5cad4ccc8fad37c009f8592d66eea5eae
-
Size
821KB
-
MD5
1b4bb7d5735a3014609cec04e034bfc6
-
SHA1
f6cd3e42909a553a2e3ad5980227d9f62e014688
-
SHA256
d4854532e499961c6a9af5138917bfa5cad4ccc8fad37c009f8592d66eea5eae
-
SHA512
a42293ed8a689d964964e613b798ae8760a6943e00fb1a237aeb762e63a796ca9581cd08f1449cb3315d2fb120c8db8e501faba824442e61d7c442c647cf2bd8
-
SSDEEP
24576:ZMQlOQ/CnSO6YycPdE5rHCDzZFMnMf2bbYJtVzf:+UhOx6YyMdwqDMnMYEJt
Malware Config
Signatures
Files
-
d4854532e499961c6a9af5138917bfa5cad4ccc8fad37c009f8592d66eea5eae.exe windows x86
f4089fe30323b0998ab170aa1ab245a6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
Sections
CODE Size: 784KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE