Static task
static1
Behavioral task
behavioral1
Sample
171ff8b7fea59bf29fe611ef875fb9e672143fa8f3f23207779dfbaca6ec02a3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
171ff8b7fea59bf29fe611ef875fb9e672143fa8f3f23207779dfbaca6ec02a3.exe
Resource
win10v2004-20220812-en
General
-
Target
171ff8b7fea59bf29fe611ef875fb9e672143fa8f3f23207779dfbaca6ec02a3
-
Size
1.0MB
-
MD5
907bdf77f3111b0943d3b2571c4ad7e0
-
SHA1
58c26319314fa0be2b8286f2504a0c2ce0d4a624
-
SHA256
171ff8b7fea59bf29fe611ef875fb9e672143fa8f3f23207779dfbaca6ec02a3
-
SHA512
442326c061bf7588169843f49b67759ba7ee0966cd985a2ae2deabc7c82a3796373153792160f181f810e1c1b6de131f135b210d19376013e779dc0f5738545b
-
SSDEEP
24576:xe0hsEUzH7r0GOOfQThC5KwtO1bRjzsRcpANW:xeGunDIhC5KDRkEAN
Malware Config
Signatures
Files
-
171ff8b7fea59bf29fe611ef875fb9e672143fa8f3f23207779dfbaca6ec02a3.exe windows x86
1e258565f68079d771f42e55db1ec96a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoTaskMemAlloc
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
Sections
CODE Size: 918KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE