Static task
static1
Behavioral task
behavioral1
Sample
dfa8815cbe343266545b492ac393270f3c84e1a5a29514c145fbb277751b7999.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dfa8815cbe343266545b492ac393270f3c84e1a5a29514c145fbb277751b7999.exe
Resource
win10v2004-20220812-en
General
-
Target
dfa8815cbe343266545b492ac393270f3c84e1a5a29514c145fbb277751b7999
-
Size
151KB
-
MD5
90d5a265b020d64f896f632c6769be40
-
SHA1
7daa0ded051e50defdcfa609dac149e97c5f9350
-
SHA256
dfa8815cbe343266545b492ac393270f3c84e1a5a29514c145fbb277751b7999
-
SHA512
95291ffbdd48449bf930657ea1d142fe621785a566e633c95e570faa45cc1a6155f89834c79d16cb277f9ef2c52ceeeda537d8702d13c8fa13ffea2623aad451
-
SSDEEP
3072:9v2+Opp4xNbe1BV4j38j6qrQ/EhghGSFVshwzu3RaKI79plbDPtyBI:9v29X4W1nksj9Q/EhgKxBZI9vbD4BI
Malware Config
Signatures
Files
-
dfa8815cbe343266545b492ac393270f3c84e1a5a29514c145fbb277751b7999.exe windows x86
c5be99196a6c1865f2d20626faa31615
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptBinaryToStringW
kernel32
GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
HeapSize
shlwapi
PathAppendA
crtdll
__GetMainArgs
exit
raise
signal
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 40B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 748B - Virtual size: 748B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 268B - Virtual size: 268B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ