Static task
static1
Behavioral task
behavioral1
Sample
632e85e2f344f0d193436a6495cc9465a66a82f64f109eb1a266320490743421.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
632e85e2f344f0d193436a6495cc9465a66a82f64f109eb1a266320490743421.exe
Resource
win10v2004-20220812-en
General
-
Target
632e85e2f344f0d193436a6495cc9465a66a82f64f109eb1a266320490743421
-
Size
171KB
-
MD5
13621a5652207c216bdb87aa87134ff3
-
SHA1
aa4dcd4c87d08bec0843ed48ad702f2a4b8d9c3c
-
SHA256
632e85e2f344f0d193436a6495cc9465a66a82f64f109eb1a266320490743421
-
SHA512
eb83c0e9f3e2bf62025f8ad8d1861a5f2038115d9df82b2a2f0933559b8531858c43b750e8971ed08b1232d1275cdf628fc3e648c4f99b744def685d61100dd0
-
SSDEEP
3072:AZTVEbDUv3XHj5J5cgStX9AMnfkBoSbReWaR2TLTQhwSaNI+v8MDPRCP:VnODWgSJ9AMqXbReWDTXQCSaeML
Malware Config
Signatures
Files
-
632e85e2f344f0d193436a6495cc9465a66a82f64f109eb1a266320490743421.exe windows x86
7f58568fb2bfacf4a4ab1b6fd8304595
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
shlwapi
StrRetToStrA
PathIsFileSpecA
SHCreateStreamOnFileEx
PathAppendA
PathIsContentTypeA
PathCreateFromUrlW
oleacc
CreateStdAccessibleObject
kernel32
GetCurrentThreadId
lstrlenW
LocalFree
FindAtomA
GetCurrentProcess
GetFileInformationByHandle
SetLastError
GetModuleFileNameW
OutputDebugStringW
SearchPathW
MultiByteToWideChar
GetModuleHandleA
VirtualQuery
OutputDebugStringA
EnumResourceLanguagesA
DuplicateHandle
GetCurrentDirectoryW
lstrcmpiW
LocalAlloc
VirtualProtect
GetStringTypeExW
GetFileAttributesW
CreateDirectoryW
ExitProcess
SetEnvironmentVariableW
WideCharToMultiByte
InterlockedExchange
Sections
.text Size: 86KB - Virtual size: 482KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ