Static task
static1
Behavioral task
behavioral1
Sample
979efb965eb7438b8d90b581c38df88d1e0afc24086a841703731b8583b01797.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
979efb965eb7438b8d90b581c38df88d1e0afc24086a841703731b8583b01797.exe
Resource
win10v2004-20220901-en
General
-
Target
979efb965eb7438b8d90b581c38df88d1e0afc24086a841703731b8583b01797
-
Size
558KB
-
MD5
9d46df79329e1181e232d31990ba673f
-
SHA1
87227a78bbd49655be0abdff2afde4a94f5d4a57
-
SHA256
979efb965eb7438b8d90b581c38df88d1e0afc24086a841703731b8583b01797
-
SHA512
c5d96dbf90b12233bc04e8a64b63eebab3f28d487388d7eda02e1efb09ea0da23656701369abdee9d93fe31fe13a9dcee8a86b9fa8c9f042d61aa876675de6c2
-
SSDEEP
12288:Uhbk39tLxU8d7EZ/fQdAhecXzbULkt+SYE8Uam:UhYt1xU8FAXVheCnFam
Malware Config
Signatures
Files
-
979efb965eb7438b8d90b581c38df88d1e0afc24086a841703731b8583b01797.exe windows x86
b1478f1768b79a045bc47d320695f176
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
shell32
ShellExecuteW
Sections
.text Size: 545KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE