Static task
static1
Behavioral task
behavioral1
Sample
652a71c05d1d9b60e2ba2e68875d97b075b52029d1b0b2686e3572ff175f2888.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
652a71c05d1d9b60e2ba2e68875d97b075b52029d1b0b2686e3572ff175f2888.exe
Resource
win10v2004-20220901-en
General
-
Target
652a71c05d1d9b60e2ba2e68875d97b075b52029d1b0b2686e3572ff175f2888
-
Size
563KB
-
MD5
0149e566e4917369a479d5af92bbef00
-
SHA1
9ecf7e4bf934f46a24aeb5259d8665613ffd323e
-
SHA256
652a71c05d1d9b60e2ba2e68875d97b075b52029d1b0b2686e3572ff175f2888
-
SHA512
0f2645f0209ceb352c72ece49dfe09b85f8d26aa56bf89b2dab8351eaf014f0e58cd0906ba23c7f6450f5ec2791ec8ffce22cfff9c2db71ea124b3939bdb2504
-
SSDEEP
12288:5x0D+o5gX43QfyS253L295JFaQ1r7HQwjb61DaoGtAIEg:57oaog6SG2XJFaK4w7eIEg
Malware Config
Signatures
Files
-
652a71c05d1d9b60e2ba2e68875d97b075b52029d1b0b2686e3572ff175f2888.exe windows x86
3e580e95bf5dd71fff8f17fcca747664
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VarParseNumFromStr
ws2_32
WSASetEvent
ntdll
RtlGetNtProductType
user32
GetShellWindow
GetActiveWindow
Sections
.text Size: 556KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 263B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE