?TravelCheck@@YGK:O
Static task
static1
Behavioral task
behavioral1
Sample
ac7edd7e4cc49dce3ee2064ecbab305d1346217f5e03fbfa2ca13f7725b1dd1c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ac7edd7e4cc49dce3ee2064ecbab305d1346217f5e03fbfa2ca13f7725b1dd1c.exe
Resource
win10v2004-20220812-en
General
-
Target
ac7edd7e4cc49dce3ee2064ecbab305d1346217f5e03fbfa2ca13f7725b1dd1c
-
Size
163KB
-
MD5
e8597c1943f7831279085d170cce08ab
-
SHA1
2f05e1754f2dfef84238d566e2824c6f5ee83259
-
SHA256
ac7edd7e4cc49dce3ee2064ecbab305d1346217f5e03fbfa2ca13f7725b1dd1c
-
SHA512
64244835e8fba3ed1bbbb64673c192a4e85300f12c523e7e34515d75e2e785a5624bc0ab9c40530abb9a438192afefc59e9926602c9228d409c84c4a21280823
-
SSDEEP
3072:KeXa0IC/BLAn2HthhuYNtdLIU4GkV/ZVJ65TOeukawrHXQGN5/u1:KvZC/9cU4GkVvJ65TOfkBrHu1
Malware Config
Signatures
Files
-
ac7edd7e4cc49dce3ee2064ecbab305d1346217f5e03fbfa2ca13f7725b1dd1c.exe windows x86
07bdd850dd18fdf26c29ac9c4b72f1ef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
fclose
_amsg_exit
_initterm
_ismbblead
rand
_XcptFilter
_exit
_cexit
__setusermatherr
memset
__getmainargs
isspace
shlwapi
UrlGetLocationA
UrlIsOpaqueW
user32
SetWindowTextA
CascadeWindows
GetIconInfo
ScrollWindow
ToUnicodeEx
CreateAcceleratorTableW
SendMessageW
GetClassNameW
CreateIconIndirect
SendMessageTimeoutW
IsCharAlphaA
wsprintfW
EnumChildWindows
GetNextDlgTabItem
GetDC
DefDlgProcW
DestroyMenu
kernel32
MoveFileW
GetCommState
GetModuleHandleA
lstrcmpiW
DefineDosDeviceW
SetCommBreak
GetModuleFileNameA
FindResourceA
GetComputerNameA
lstrlenA
GlobalMemoryStatus
LoadResource
Exports
Exports
Sections
.text Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.$dsdir Size: 512B - Virtual size: 123B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.icar Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ecar Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ally Size: 1024B - Virtual size: 518B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.carry Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ram Size: - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ