Static task
static1
Behavioral task
behavioral1
Sample
7cac5a993ac38a76a42433c0737904e56b287528b14d880099969c59a0ad8fa9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7cac5a993ac38a76a42433c0737904e56b287528b14d880099969c59a0ad8fa9.exe
Resource
win10v2004-20220812-en
General
-
Target
7cac5a993ac38a76a42433c0737904e56b287528b14d880099969c59a0ad8fa9
-
Size
25KB
-
MD5
0ab26c9618d0f8c4824b6487e366b6b7
-
SHA1
584854a53b801b39d8139c717f7bac42ec8f03bc
-
SHA256
7cac5a993ac38a76a42433c0737904e56b287528b14d880099969c59a0ad8fa9
-
SHA512
f78ac299661b64597560c63d6ecc2108351b2cd10d910f80d1f889e084910e324fc936ad689489dc5194b23f1e804b50f15c666b4ed5ee7d4c9d34db9c3d0835
-
SSDEEP
768:WqbKI+C2pbyw15X/WllPlqZrpvU8VwiuC:VKI+C2pWw1kzNq7M82iu
Malware Config
Signatures
Files
-
7cac5a993ac38a76a42433c0737904e56b287528b14d880099969c59a0ad8fa9.exe windows x86
6aca19fcc834d558ccd0d4e1d52008a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
strchr
user32
GetCursorPos
shlwapi
SHDeleteValueA
wininet
InternetSetOptionA
shell32
SHGetSpecialFolderPathA
advapi32
RegSetValueExA
ole32
CLSIDFromProgID
oleaut32
SysStringLen
msvcp60
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
Sections
.text Size: 19KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE