Static task
static1
Behavioral task
behavioral1
Sample
681a863eef68acd698e8b8d43c79be16dda67c04f1c491ff076de6bbeebd9cbd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
681a863eef68acd698e8b8d43c79be16dda67c04f1c491ff076de6bbeebd9cbd.exe
Resource
win10v2004-20220812-en
General
-
Target
681a863eef68acd698e8b8d43c79be16dda67c04f1c491ff076de6bbeebd9cbd
-
Size
3.6MB
-
MD5
89df5d1506e8e24df715ee93d2c33327
-
SHA1
cc01de6a0518fb9b89bf5a4e66160d167c630844
-
SHA256
681a863eef68acd698e8b8d43c79be16dda67c04f1c491ff076de6bbeebd9cbd
-
SHA512
a316e0231442b61d47b093617782128eb135a6330a617cf55eacd80339b9f39f6505a1875363008f03e5115693f9d107be42d09562e022c7437cd6c07cf78aef
-
SSDEEP
98304:k5Md0m6Lnc1U+zw5q+vKUWiJ7yDXSFne7f1dyYFN:k5MGmI+U+zYq+iUWisiqdyu
Malware Config
Signatures
Files
-
681a863eef68acd698e8b8d43c79be16dda67c04f1c491ff076de6bbeebd9cbd.exe windows x86
1071d25e865167bfbaacc862c08d607c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
cbent
YunXing
Sections
CODE Size: 139KB - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE