Static task
static1
Behavioral task
behavioral1
Sample
c62be8d1dad75d0f8539b71616e907495c2bb58e77b6dff19a567a957c11890a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c62be8d1dad75d0f8539b71616e907495c2bb58e77b6dff19a567a957c11890a.exe
Resource
win10v2004-20220901-en
General
-
Target
c62be8d1dad75d0f8539b71616e907495c2bb58e77b6dff19a567a957c11890a
-
Size
41KB
-
MD5
45110dca4438abe02e8e6eb1034285c9
-
SHA1
0b8ca6ae05b4246c9fea9c8762affc5d9e2ecba6
-
SHA256
c62be8d1dad75d0f8539b71616e907495c2bb58e77b6dff19a567a957c11890a
-
SHA512
2e42e8900e294b15e31a6e4e470fb212f53f063ac95604c8bf5f0b1214e5408824f2b9651582fff3532aef2e72b98397c8b2d4dc0df59291ec96bf01f4405a5d
-
SSDEEP
768:Lw4EVInaojUm1Z0EIN+x/XPNnTJcGoIrZ3eL5pxhp+4j/mVrh:045aQj1Z9xx1chIELPxhsrh
Malware Config
Signatures
Files
-
c62be8d1dad75d0f8539b71616e907495c2bb58e77b6dff19a567a957c11890a.exe windows x86
ec094eed8ffe932999e1082ebeda44a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvcrt
memchr
user32
SetForegroundWindow
gdi32
GetDeviceCaps
advapi32
AdjustTokenPrivileges
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
wininet
InternetCloseHandle
ole32
CoCreateInstance
oleaut32
SysAllocString
version
GetFileVersionInfoSizeA
Sections
pec1 Size: 33KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pec Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE