Static task
static1
Behavioral task
behavioral1
Sample
d56928ffb62e7d4425628b0ff8e2505a2f69f03eae5ab46441d197e4903ca81e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d56928ffb62e7d4425628b0ff8e2505a2f69f03eae5ab46441d197e4903ca81e.exe
Resource
win10v2004-20220812-en
General
-
Target
d56928ffb62e7d4425628b0ff8e2505a2f69f03eae5ab46441d197e4903ca81e
-
Size
694KB
-
MD5
57811dd726e6c450c8412d9a8e13bc1b
-
SHA1
a01e16cc184290c5b7cfa211451522aafbdaac8f
-
SHA256
d56928ffb62e7d4425628b0ff8e2505a2f69f03eae5ab46441d197e4903ca81e
-
SHA512
acbaf4886f0f68f5a33b6836ca5f8c946d6dcb507bb9a5007510b3629e3a82ac87d486c67ed578a7f5856717d29aa05093a0e623b569e9397e437906e347be46
-
SSDEEP
12288:p6afgiHU0hluOJzGyiOUMysBiqlJs3xA2SIXtP0Xmwmi6FTM2dz+SSApZOqE6:p1fgi0gTXfUMNBiqJyHjwOM2kSSAeq
Malware Config
Signatures
Files
-
d56928ffb62e7d4425628b0ff8e2505a2f69f03eae5ab46441d197e4903ca81e.exe windows x86
544b53f98a67a56b8eff76555460ad62
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetGetConnectionA
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
urlmon
URLDownloadToFileA
shell32
SHGetSpecialFolderLocation
comdlg32
GetOpenFileNameA
winmm
timeGetTime
Sections
CODE Size: 657KB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE