Static task
static1
Behavioral task
behavioral1
Sample
e75edf808052a49e128e04a701e6ce1f9e627934196264faa356434b39e41b7a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e75edf808052a49e128e04a701e6ce1f9e627934196264faa356434b39e41b7a.exe
Resource
win10v2004-20220901-en
General
-
Target
e75edf808052a49e128e04a701e6ce1f9e627934196264faa356434b39e41b7a
-
Size
254KB
-
MD5
778a6b3103f593360a2839272888d540
-
SHA1
ebfdbb220d1505def14d232351f9037163d86607
-
SHA256
e75edf808052a49e128e04a701e6ce1f9e627934196264faa356434b39e41b7a
-
SHA512
08a96464b6c8bfbdcf5ced47abad3ca5bf5cd4ce11b4e96dd99875debce0ce25bf9794bc74a699dfc1a6919b795b39e032ce8da8d37b6a729669072c08618694
-
SSDEEP
6144:Wr68vVvdrbEsD6PbN+O8Eg0kJ8ARw8AB:WW8vVVEw6zN8T1qARw8A
Malware Config
Signatures
Files
-
e75edf808052a49e128e04a701e6ce1f9e627934196264faa356434b39e41b7a.exe windows x86
f95c3d489bb12bcbac4bf2fe9e9a9ceb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
Sections
CODE Size: 148KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE