Static task
static1
Behavioral task
behavioral1
Sample
536b71d1ded98ddcef2076958db456141545a072355ae96fba3cd2635a417c6f.exe
Resource
win7-20220812-en
General
-
Target
536b71d1ded98ddcef2076958db456141545a072355ae96fba3cd2635a417c6f
-
Size
287KB
-
MD5
4956b10b170c44590150f6042accdb02
-
SHA1
c4f35c5b5922002a2eb90f4a0c715b62a5f46de5
-
SHA256
536b71d1ded98ddcef2076958db456141545a072355ae96fba3cd2635a417c6f
-
SHA512
2ee3d851e4515f9cc69c2225d200fb44dcf4364dc5b426da31762c942d2387c0a5eb24d4d312b506747d79fe189f359a7bb9bdd254cba36ee2abe6e1b33caa91
-
SSDEEP
6144:hLOasUboFqQ6BGQSu3czOnmfu1D7HRRknUfw/Iytb:h5oFqQ68a8mF1D7HRRkUI
Malware Config
Signatures
Files
-
536b71d1ded98ddcef2076958db456141545a072355ae96fba3cd2635a417c6f.exe windows x86
7e7395762bb88fbfab9f227a3078fd2d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
shlwapi
StrRetToBSTR
PathFindExtensionW
PathCreateFromUrlW
PathRemoveFileSpecW
PathIsRelativeW
PathAppendW
UrlCreateFromPathW
StrCmpIW
UrlUnescapeW
PathCombineW
oleacc
CreateStdAccessibleObject
kernel32
LocalAlloc
GlobalFindAtomA
SetUnhandledExceptionFilter
GetTickCount
IsDebuggerPresent
QueryPerformanceCounter
InterlockedCompareExchange
GetCurrentProcess
InterlockedExchange
GetStartupInfoA
EnumResourceLanguagesW
VirtualProtect
GetModuleHandleW
GetLocaleInfoW
GetCurrentProcessId
FoldStringW
GetPrivateProfileSectionA
GetCurrentThreadId
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetProcessHeap
TerminateProcess
DeleteFileW
Sections
.text Size: 149KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ