Static task
static1
Behavioral task
behavioral1
Sample
71b96c68accdd1834e684ff9c6a411e99b899209139ecec8c7c5aab35204acc6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
71b96c68accdd1834e684ff9c6a411e99b899209139ecec8c7c5aab35204acc6.exe
Resource
win10v2004-20220901-en
General
-
Target
71b96c68accdd1834e684ff9c6a411e99b899209139ecec8c7c5aab35204acc6
-
Size
1.5MB
-
MD5
645b127923f216d28d62055806ae1d80
-
SHA1
a08ec79da9c9d16dadcf4926e0024b92be9b6b74
-
SHA256
71b96c68accdd1834e684ff9c6a411e99b899209139ecec8c7c5aab35204acc6
-
SHA512
2d2f1b135372145955a6e5d26ca42bff019dac67f6d258257882188e911dbec87c99a3082058e76aca4c64782d75631c43f004bd2ae41f07763358319563bcef
-
SSDEEP
24576:oGc/RHZmVcFlIRMV8DcXskeSjMbQAl0Fsxqgx1guoKs66bVVhuqEkeVHeuHl:84VTKiwXeAHgxKuoKUEqyll
Malware Config
Signatures
Files
-
71b96c68accdd1834e684ff9c6a411e99b899209139ecec8c7c5aab35204acc6.exe windows x86
7e10b84e5dcaf3573802da6b3c2381e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
kernel32
GetModuleFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 664KB - Virtual size: 888KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 728KB - Virtual size: 728KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ