Static task
static1
Behavioral task
behavioral1
Sample
a830c602669fed749d2375adb4bdf27ef95a7f6d62093756ddef44866884e56b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a830c602669fed749d2375adb4bdf27ef95a7f6d62093756ddef44866884e56b.exe
Resource
win10v2004-20220812-en
General
-
Target
a830c602669fed749d2375adb4bdf27ef95a7f6d62093756ddef44866884e56b
-
Size
337KB
-
MD5
497a57000d785b1c95f861c35533b83b
-
SHA1
6fec4b1cb0ddeea9afe06893ec244a2deec00e67
-
SHA256
a830c602669fed749d2375adb4bdf27ef95a7f6d62093756ddef44866884e56b
-
SHA512
4f191317344b82edafc6a3aa0e752eda58067771d17e4438217fb7b48531c1e174da402ca2c7ef0917714874fdd9bb6f6fe740c5e4fbf8710c67ce0cb4519a06
-
SSDEEP
6144:+lc9J/F30uyd6QWpX79+y1q+aN9t8pl9EMTpoiA001ggwNyeioSuuYA35B:+lc9J/aZWpX79BpaN9ofEMd2VmQBoSuk
Malware Config
Signatures
Files
-
a830c602669fed749d2375adb4bdf27ef95a7f6d62093756ddef44866884e56b.exe windows x86
c2f6f83f92fa54d9e84f748850928c4a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoTaskMemAlloc
comctl32
ImageList_SetIconSize
shell32
Shell_NotifyIconA
Sections
CODE Size: 288KB - Virtual size: 852KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE