?TravelCheck@@YGK:O
Static task
static1
Behavioral task
behavioral1
Sample
7d53afab93ef3500dc8f882bff139f97ac9730786de7ff736f97965c2062ee57.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7d53afab93ef3500dc8f882bff139f97ac9730786de7ff736f97965c2062ee57.exe
Resource
win10v2004-20220812-en
General
-
Target
7d53afab93ef3500dc8f882bff139f97ac9730786de7ff736f97965c2062ee57
-
Size
188KB
-
MD5
d5ea2acede82ff4075c2fe013163601f
-
SHA1
9a5404696945d4168401334fe6cddfdef04d7825
-
SHA256
7d53afab93ef3500dc8f882bff139f97ac9730786de7ff736f97965c2062ee57
-
SHA512
4cd91a90f2dbe9520b43eda456bce30dc554e53bc66de0c199ff60e38de507af606b4ffe527bdcfe97c1c664e67b8ebc6650d2c0b29408c7d3f8ae05e68d37e5
-
SSDEEP
3072:zH8CFzqHOvNdDy/8H+shm8it0F54cDqbt24YlSFlxWr6wCRWUI0HUBumZX27P5/i:vMuvNdDy/8HLhmjqyc81YlSFlxWr6wCO
Malware Config
Signatures
Files
-
7d53afab93ef3500dc8f882bff139f97ac9730786de7ff736f97965c2062ee57.exe windows x86
673e7182860861e47345b4279d9f90c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
UrlIsOpaqueW
UrlGetLocationA
user32
AdjustWindowRect
IsCharAlphaA
wsprintfW
ShowWindow
GetMenuStringA
MapVirtualKeyW
GetKeyboardLayoutNameW
GetMenuItemRect
RegisterClassExW
GetKeyboardLayoutList
CharToOemW
MoveWindow
GetMessageW
GetDC
SetMenu
GetUserObjectInformationA
PostQuitMessage
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
_initterm
_ismbblead
_XcptFilter
memset
srand
_exit
atoi
_cexit
__setusermatherr
__getmainargs
wcschr
kernel32
lstrlenA
GetThreadContext
GetCurrentThread
GetModuleFileNameA
GetComputerNameExA
lstrcmpiW
GetModuleHandleW
AddAtomA
GetModuleHandleA
RegisterWaitForSingleObject
FindResourceA
LoadResource
Exports
Exports
Sections
.text Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.$dsdir Size: 512B - Virtual size: 106B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.icar Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ecar Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ally Size: 1024B - Virtual size: 589B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.carry Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ram Size: - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ