Static task
static1
Behavioral task
behavioral1
Sample
f25f2e488852412eea1ccbe8e51f0f814dd9cdee02e58cb32d85b5968a051d3d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f25f2e488852412eea1ccbe8e51f0f814dd9cdee02e58cb32d85b5968a051d3d.exe
Resource
win10v2004-20220812-en
General
-
Target
f25f2e488852412eea1ccbe8e51f0f814dd9cdee02e58cb32d85b5968a051d3d
-
Size
66KB
-
MD5
4a88b1f086a950db4096fe1f1a312766
-
SHA1
885d269da315e45e38bd06cb3b1bc8dff7f6e49e
-
SHA256
f25f2e488852412eea1ccbe8e51f0f814dd9cdee02e58cb32d85b5968a051d3d
-
SHA512
9b25330c6bf246d51b00649867bce4db67146d74bfd1593ab7ebda80e51fc105c8d6217a21afb153fc5f83dcd93a4fdea642040ba0ce33cf79072d9d7e16f543
-
SSDEEP
1536:7uQTI2t0cpsYp0Rv2LlnzPfil4OSsy29y:7uQTI2W+speRnziaOSGy
Malware Config
Signatures
Files
-
f25f2e488852412eea1ccbe8e51f0f814dd9cdee02e58cb32d85b5968a051d3d.exe windows x86
fdecf2d41c5fe985bff0e9e146154e88
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
version
GetFileVersionInfoSizeA
user32
SetTimer
gdi32
Rectangle
advapi32
RegDeleteValueA
shell32
SHGetSpecialFolderPathA
wininet
InternetCrackUrlA
shlwapi
SHDeleteValueA
lz32
LZCopy
msvcrt
_strrev
ws2_32
WSACleanup
ole32
OleRun
oleaut32
VariantClear
urlmon
URLDownloadToFileA
Sections
.text Size: 57KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE