Static task
static1
Behavioral task
behavioral1
Sample
6749f46091d0e2a73d3f6e43cc2aa98fa5bdf1a9d33edc8ecd00b0fbc57c868e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6749f46091d0e2a73d3f6e43cc2aa98fa5bdf1a9d33edc8ecd00b0fbc57c868e.exe
Resource
win10v2004-20220812-en
General
-
Target
6749f46091d0e2a73d3f6e43cc2aa98fa5bdf1a9d33edc8ecd00b0fbc57c868e
-
Size
315KB
-
MD5
6e531eda33f3c7784d8e1cfe39d41a41
-
SHA1
9da7a11b67c8aeb5e1061831870d8b64302746a3
-
SHA256
6749f46091d0e2a73d3f6e43cc2aa98fa5bdf1a9d33edc8ecd00b0fbc57c868e
-
SHA512
bde066e5000ec5b5b94b34c67689b081c8c93c324340e7b3a836119a069d728e5269ffb4ce9cf647efa098b2c55ca077d8ba281bc420dcbf9d52dc1bd9e3e36e
-
SSDEEP
6144:WXDXL0BvnjbJDB7VHMkzQB9qnxcoH/3Rn:Qb0BPjb37ykeuxcoP
Malware Config
Signatures
Files
-
6749f46091d0e2a73d3f6e43cc2aa98fa5bdf1a9d33edc8ecd00b0fbc57c868e.exe windows x86
f0c81b6f8530eba9d7b8894954822d1c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
comctl32
_TrackMouseEvent
shell32
Shell_NotifyIconA
Sections
.text Size: 150KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE