Static task
static1
Behavioral task
behavioral1
Sample
5bf99919d89b29829d5f411a63c3c69003d11dea37bc4a26597b3b22e99c9864.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5bf99919d89b29829d5f411a63c3c69003d11dea37bc4a26597b3b22e99c9864.exe
Resource
win10v2004-20220901-en
General
-
Target
5bf99919d89b29829d5f411a63c3c69003d11dea37bc4a26597b3b22e99c9864
-
Size
30KB
-
MD5
1c43c55677b5847572e5e8c3571850c6
-
SHA1
e06ccf1373eddad47e1bec13d2d9eda249da107b
-
SHA256
5bf99919d89b29829d5f411a63c3c69003d11dea37bc4a26597b3b22e99c9864
-
SHA512
b9298a131cabd304d6089851bcc41b7ed2320d8977ee6610dc1f1a1f53eab6c7b2d0e1539c48a3fa6104eb5a48b73e8ec399523efd3b149880aa4d4fecf3b0f9
-
SSDEEP
768:A29kf3TUZr8Aax42BLyGiEBAipihgZFHzRfMxAZhqh6wR:wG2aW5FHzblw
Malware Config
Signatures
Files
-
5bf99919d89b29829d5f411a63c3c69003d11dea37bc4a26597b3b22e99c9864.exe windows x86
ad26512e9a025bffa5b645d07fcbfa1d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
wcscmp
user32
CloseDesktop
shlwapi
SHDeleteValueA
wininet
InternetSetOptionA
shell32
SHGetSpecialFolderPathA
advapi32
RegSetValueExA
ole32
CLSIDFromProgID
oleaut32
SysFreeString
msvcp60
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
Sections
.text Size: 26KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE