Static task
static1
Behavioral task
behavioral1
Sample
5a218834ed9087d3a0f72b8e3914cc7cffa3fc41b8ceb4f51e95afba85258aec.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5a218834ed9087d3a0f72b8e3914cc7cffa3fc41b8ceb4f51e95afba85258aec.exe
Resource
win10v2004-20220812-en
General
-
Target
5a218834ed9087d3a0f72b8e3914cc7cffa3fc41b8ceb4f51e95afba85258aec
-
Size
45KB
-
MD5
b2db2aaf5ff23c6e6e7a67066a7ccb22
-
SHA1
3b9b59895fc985652048f81a129c6f7b2a55de05
-
SHA256
5a218834ed9087d3a0f72b8e3914cc7cffa3fc41b8ceb4f51e95afba85258aec
-
SHA512
b0387eae947406e4f89982427a8a09147e12391161f2ed1c2114261c3dcece8d6e766c43b82990d997d16bd242a8ba66df44b49a93fae29e09c9f554636cad07
-
SSDEEP
768:kwTVd/b99jhEhVftVEPd/aBB8riAvjHzRz3VQT1QzphY6ONzb6g99b7HT:kKbz9nEhVfTEpaBBCtz3OT4puNz7v
Malware Config
Signatures
Files
-
5a218834ed9087d3a0f72b8e3914cc7cffa3fc41b8ceb4f51e95afba85258aec.exe windows x86
29d4d9a4e535bff721362e89820bef9e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 40KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE