Static task
static1
Behavioral task
behavioral1
Sample
265db67ccc662109af083f4297351e86114499509fed046f8102271e336e8e1a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
265db67ccc662109af083f4297351e86114499509fed046f8102271e336e8e1a.exe
Resource
win10v2004-20220812-en
General
-
Target
265db67ccc662109af083f4297351e86114499509fed046f8102271e336e8e1a
-
Size
121KB
-
MD5
6c980e39057f143fbe7bad3d43f1e9e0
-
SHA1
8a8c7fe5825f156db9cf285e4847785d80a8a85b
-
SHA256
265db67ccc662109af083f4297351e86114499509fed046f8102271e336e8e1a
-
SHA512
5c88fbcdc6a32e1ac4e3f383a46300372f1d61946580578c961945cf48226fe09a9157fdd37a7916ba1ab04ab702ff2de865c67ddba84512510430ccb06c995e
-
SSDEEP
1536:CJKS8xdq0E2lnhBT/dGEvyGgCTRGqPjvlpp/06w6Px9+3cu9V+gK:4J8xh/wEvytCTRGqPL1/7w6ZAs+VBK
Malware Config
Signatures
Files
-
265db67ccc662109af083f4297351e86114499509fed046f8102271e336e8e1a.exe windows x86
231425377893abb7b2ff9764e70528f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetOpenEnumA
version
VerQueryValueA
wsock32
WSACleanup
winmm
waveOutSetVolume
Sections
CODE Size: 35KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 54B - Virtual size: 54B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE