Static task
static1
Behavioral task
behavioral1
Sample
559a810a17555b943e212909593464526656a98df303c493a58bddb84b681ee6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
559a810a17555b943e212909593464526656a98df303c493a58bddb84b681ee6.exe
Resource
win10v2004-20220812-en
General
-
Target
559a810a17555b943e212909593464526656a98df303c493a58bddb84b681ee6
-
Size
436KB
-
MD5
9642b9cc2768f305a98429e30272cfe0
-
SHA1
ee95637a0f4dc1224c2294039a94712e3d68c3f7
-
SHA256
559a810a17555b943e212909593464526656a98df303c493a58bddb84b681ee6
-
SHA512
f9bd4bc9cd638fbad5cb328d0b63fa2863b60afcb2b6036fa6305a63216dd9d7b30e2383859259a0d92ba5dfec08e6c771c7c40b70dce2373de5f10f736d92e2
-
SSDEEP
12288:Py7MlK+KJGd7aN582Oa78Fyc+JG8wV58/i/Fj9nS2:67LmGNf2UJqT8s3S
Malware Config
Signatures
Files
-
559a810a17555b943e212909593464526656a98df303c493a58bddb84b681ee6.exe windows x86
712c5bb4616ba63860d616ee68a2ff07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
NtDeleteFile
oleaut32
VarFix
ole32
CoGetContextToken
user32
GetDesktopWindow
LoadStringA
GetKBCodePage
kernel32
GetSystemDefaultLCID
Sections
.text Size: 433KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 187B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE