Static task
static1
Behavioral task
behavioral1
Sample
a43f6181393550b96c58e8f7b4e44af53b664b177ad7f697a734259f9aa31a07.exe
Resource
win7-20220812-en
General
-
Target
a43f6181393550b96c58e8f7b4e44af53b664b177ad7f697a734259f9aa31a07
-
Size
358KB
-
MD5
76cba14cc656ff07d505e16e8ea9b796
-
SHA1
04f29df58af6fb10178d145939668c89cd457114
-
SHA256
a43f6181393550b96c58e8f7b4e44af53b664b177ad7f697a734259f9aa31a07
-
SHA512
4ad48b66457e89eef44bc2bf4735c19afd876565fbccfbd70d964265ea33ce56d3614869805ecc328b4e9eddcc9a93002fe7aa00d83503d4b66b963fe98c54d6
-
SSDEEP
6144:Pf+Zs2+rt9WdXuObmuKMHg8heB8FumW9Cbb:NNKXBmuwjdfcb
Malware Config
Signatures
Files
-
a43f6181393550b96c58e8f7b4e44af53b664b177ad7f697a734259f9aa31a07.exe windows x86
3232be9db17492f2a50f55a48ac7d0e3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
ole32
OleInitialize
pstorec
PStoreCreateInstance
rasapi32
RasGetEntryDialParamsA
shell32
SHGetSpecialFolderPathA
crypt32
CryptUnprotectData
Sections
CODE Size: 245KB - Virtual size: 416KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE