Static task
static1
Behavioral task
behavioral1
Sample
b1aa7de8f20909c73eea8a674a5f2cb1d9d3c7dd37d0aad4963a19e818b7956d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b1aa7de8f20909c73eea8a674a5f2cb1d9d3c7dd37d0aad4963a19e818b7956d.exe
Resource
win10v2004-20220812-en
General
-
Target
b1aa7de8f20909c73eea8a674a5f2cb1d9d3c7dd37d0aad4963a19e818b7956d
-
Size
3.6MB
-
MD5
fc164b500b15e4e695e75beb9cc4484d
-
SHA1
1edcc31680943c726fb8479b79e7d86379199204
-
SHA256
b1aa7de8f20909c73eea8a674a5f2cb1d9d3c7dd37d0aad4963a19e818b7956d
-
SHA512
f7b9c48b97f0d30c8badae87a09a236dc6f1f8d56534a538c514933309c2317184eba0c139d62e102407f7fc782299746e8a9793d5f0293cb6cc0cdea8807ff3
-
SSDEEP
98304:/Tse1qfcgVg8a6UnyVPVBuoLKQLu/R4yV/4DjYUg:/Tse1qhLU2m0ty/RU3YF
Malware Config
Signatures
Files
-
b1aa7de8f20909c73eea8a674a5f2cb1d9d3c7dd37d0aad4963a19e818b7956d.exe windows x86
1071d25e865167bfbaacc862c08d607c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
cbent
YunXing
Sections
CODE Size: 139KB - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE