Static task
static1
Behavioral task
behavioral1
Sample
7914f3e1990bab866182fa4f3fbfb4123d7b47e86c5534a4602f8f7daecafef6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7914f3e1990bab866182fa4f3fbfb4123d7b47e86c5534a4602f8f7daecafef6.exe
Resource
win10v2004-20220812-en
General
-
Target
7914f3e1990bab866182fa4f3fbfb4123d7b47e86c5534a4602f8f7daecafef6
-
Size
277KB
-
MD5
0ccdd5c1429f55139e82c9927ae6a930
-
SHA1
efc680543921ea17336b426d8735afbb7eff6450
-
SHA256
7914f3e1990bab866182fa4f3fbfb4123d7b47e86c5534a4602f8f7daecafef6
-
SHA512
2d81753e0f930b15e581b1e10c2288ae369815b87a73ad35a306a3c393043cd60fee5ba3f20325a03726bc1d1462eac0f4acdd82c6858c4f4fd67aaf8bde1c38
-
SSDEEP
6144:Za5SS1cxFbp/ryUFp41kGXy2OnPI41Maa:2SSiPdy4amDpdBa
Malware Config
Signatures
Files
-
7914f3e1990bab866182fa4f3fbfb4123d7b47e86c5534a4602f8f7daecafef6.exe windows x86
47f0ab114024e32e4e2260c7ff021f12
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
comctl32
_TrackMouseEvent
urlmon
URLDownloadToFileA
shell32
ShellExecuteA
wsock32
WSACleanup
rasapi32
RasGetEntryDialParamsA
Sections
.text Size: 247KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE