Static task
static1
Behavioral task
behavioral1
Sample
2399363c4865e069917dc9303f251685055c0a159d47f01ce60a86282c91f2f1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2399363c4865e069917dc9303f251685055c0a159d47f01ce60a86282c91f2f1.exe
Resource
win10v2004-20220812-en
General
-
Target
2399363c4865e069917dc9303f251685055c0a159d47f01ce60a86282c91f2f1
-
Size
1.0MB
-
MD5
79d2694534b7f4bf2bbf2cf77a9bc50c
-
SHA1
4c475f5e9cda410f3376686c1d0de54577bc4580
-
SHA256
2399363c4865e069917dc9303f251685055c0a159d47f01ce60a86282c91f2f1
-
SHA512
5b455cfd14e5ff04bbbb7f2fd03fe9909dd1e8c94dd0256c100f833291a6973f5e0902ffbd5c8ac4d8295e8ed68832a337e6408f517bbc3b696c9a0209fcf44d
-
SSDEEP
24576:ODlcTWhaC/kmRQEMDF1BV1PW51WDoMcJf2X9i5NdCUa:cl8C8mR/61BV1wWfcJQ98NX
Malware Config
Signatures
Files
-
2399363c4865e069917dc9303f251685055c0a159d47f01ce60a86282c91f2f1.exe windows x86
ca8a361dedf71e76246b9a7c3da05438
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
urlmon
UrlMkGetSessionOption
shell32
SHGetSpecialFolderLocation
wsock32
WSACleanup
ntdll
NtQueryInformationProcess
rpcrt4
UuidCreateSequential
Sections
CODE Size: 949KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE