?WorkInit@@YGXUverifyEw@CA7
Static task
static1
Behavioral task
behavioral1
Sample
96f5c6b446c36e81e778ed56090ed28311019e6e7278766cf37fafb66633bcee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
96f5c6b446c36e81e778ed56090ed28311019e6e7278766cf37fafb66633bcee.exe
Resource
win10v2004-20220812-en
General
-
Target
96f5c6b446c36e81e778ed56090ed28311019e6e7278766cf37fafb66633bcee
-
Size
203KB
-
MD5
9185e56b7ac49528d6d6c372ef9db908
-
SHA1
84b8c7b66f5dfc1efe4a61be0071fed4e8080a5d
-
SHA256
96f5c6b446c36e81e778ed56090ed28311019e6e7278766cf37fafb66633bcee
-
SHA512
0da98c244f800781fdc2669e3aa316c283a1285979f1d24c71bf3703e9d49cef5d7990733a76f68153dd33ab1706babb5580c569c48e4da8bedcc4f82e8c5ffa
-
SSDEEP
6144:PCGCmhcXh31WVJSuJYnmItNfXZFeDUcp7C2ZRdB5XX:PlCIcXFG0uqPNfneDRpeERh
Malware Config
Signatures
Files
-
96f5c6b446c36e81e778ed56090ed28311019e6e7278766cf37fafb66633bcee.exe windows x86
333f97c10ba0ce21ae16a455ed49306f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsLFNFileSpecA
ord29
PathIsRootA
UrlGetPartA
StrStrA
ord155
StrChrW
kernel32
GetCurrentDirectoryW
user32
GetProcessWindowStation
MapDialogRect
Exports
Exports
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dir Size: 512B - Virtual size: 41B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.key1 Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.main Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.key2 Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wles Size: 1024B - Virtual size: 547B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.smain Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.key3 Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ