Static task
static1
Behavioral task
behavioral1
Sample
0e6f7960c7d186461138a1efd9d2b0a5acec1178f5a54ac631e9180d6908a842.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0e6f7960c7d186461138a1efd9d2b0a5acec1178f5a54ac631e9180d6908a842.exe
Resource
win10v2004-20220812-en
General
-
Target
0e6f7960c7d186461138a1efd9d2b0a5acec1178f5a54ac631e9180d6908a842
-
Size
313KB
-
MD5
a1b6662aecb50a4c68aa7acd0a646370
-
SHA1
847ab8b044f5b2da7c44da9d3a2db11d25b6a668
-
SHA256
0e6f7960c7d186461138a1efd9d2b0a5acec1178f5a54ac631e9180d6908a842
-
SHA512
b5274d7cb2a16e7ea6013fad39c5a63e8ef94ffff09c33a3a646d1fb73d98da00dbacc9050cc66019c7fa6ffa4ea3d8454eed18b9e36168ac6630a756dcc83f3
-
SSDEEP
3072:12qkDquknQ+bxxPd7zAIRfcxkJFRanLhlHteTpFyn/pcg53vs/Inb:12k7jdWxkJULA1Fy/3Rn
Malware Config
Signatures
Files
-
0e6f7960c7d186461138a1efd9d2b0a5acec1178f5a54ac631e9180d6908a842.exe windows x86
f0c81b6f8530eba9d7b8894954822d1c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
comctl32
_TrackMouseEvent
shell32
Shell_NotifyIconA
Sections
.text Size: 149KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE