Static task
static1
Behavioral task
behavioral1
Sample
bef61aef9203890a44142720c3324189e95ccdb934af0f7f1586d1ad2ef7b808.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bef61aef9203890a44142720c3324189e95ccdb934af0f7f1586d1ad2ef7b808.exe
Resource
win10v2004-20220812-en
General
-
Target
bef61aef9203890a44142720c3324189e95ccdb934af0f7f1586d1ad2ef7b808
-
Size
436KB
-
MD5
96ad8cf1c4ecc82690572d3cd3e85e30
-
SHA1
0854f9909bebdd719c3c383dcd63b30993a44e9c
-
SHA256
bef61aef9203890a44142720c3324189e95ccdb934af0f7f1586d1ad2ef7b808
-
SHA512
ee36e36dcd2031e2eed02d1662b3472dae5eaafeaa5db9dd42bde66c1291bf7198844400ee80a51a5e9ce197e48f75499a06c8018677442f0bcc85a7793e6a23
-
SSDEEP
6144:wsRJWEtetK1Y6758kzlRckHN/SihhcovklKrgW91ui6nGJczg7r:wmAEtoT6PXcktrzklNW9taB
Malware Config
Signatures
Files
-
bef61aef9203890a44142720c3324189e95ccdb934af0f7f1586d1ad2ef7b808.exe windows x86
aa6efe849d6abb2fab13916e77045e82
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLangID
SetProcessShutdownParameters
advapi32
DuplicateEncryptionInfoFile
oleaut32
RegisterTypeLibForUser
shell32
Shell_GetCachedImageIndex
user32
GetActiveWindow
GetClipboardOwner
Sections
.text Size: 433KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 314B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE