Static task
static1
Behavioral task
behavioral1
Sample
effe4eaa26b0942a2713e5a1897c222af75efa14a7e520d3d71fc78141ea7017.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
effe4eaa26b0942a2713e5a1897c222af75efa14a7e520d3d71fc78141ea7017.exe
Resource
win10v2004-20220812-en
General
-
Target
effe4eaa26b0942a2713e5a1897c222af75efa14a7e520d3d71fc78141ea7017
-
Size
82KB
-
MD5
b12833db4026a657848d8c94afc88ea2
-
SHA1
dca330aa9fee699b5c516a89cf8ace5d7c7344b3
-
SHA256
effe4eaa26b0942a2713e5a1897c222af75efa14a7e520d3d71fc78141ea7017
-
SHA512
a05f153fe4808d0ffa75a2024a76f7a18bb4ccef303f66a17dee9874f0640c5a4f1361a7abf4e6ef3c9e6b8c318d44395febed6aa6b61cc8c63f700e540025b8
-
SSDEEP
1536:S9aWM7Xe8OCFdi7sqHalB4gB5+Us9pEHGq11uLtI1SUx3de1/4RZ:znlJri7sialB4gaUs7qGqaS1SI3R
Malware Config
Signatures
Files
-
effe4eaa26b0942a2713e5a1897c222af75efa14a7e520d3d71fc78141ea7017.exe windows x86
c42bf4107481f4960a34f220d5944482
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
shell32
ShellExecuteA
Sections
CODE Size: 71KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE