Static task
static1
Behavioral task
behavioral1
Sample
1ee82d86d54d81ed22b1991161dc07b438b41b16f60411a971c4bdd0f520b93a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1ee82d86d54d81ed22b1991161dc07b438b41b16f60411a971c4bdd0f520b93a.exe
Resource
win10v2004-20220901-en
General
-
Target
1ee82d86d54d81ed22b1991161dc07b438b41b16f60411a971c4bdd0f520b93a
-
Size
725KB
-
MD5
a09acc23a4fe1523073aa0a2afe661e0
-
SHA1
4db4f800ff00c408507cf35c668fa061261e2a0f
-
SHA256
1ee82d86d54d81ed22b1991161dc07b438b41b16f60411a971c4bdd0f520b93a
-
SHA512
9430399bb1a76dc17f91c85b4f6e683b29b6f6e79a59355acf02b47f5acd5b418ad2eb2ec622c17daa4a13878bade434f0ea1a29bc0791a7b2ff9bf3b33f1679
-
SSDEEP
12288:p1qL+IyBUnRpSunOaGccP7LSgykEJDDD7yPJDpDupSfeIHkIZucXwvjAs1WDNnAc:p4KpeRpSunOaGccTLSrkaDDD7+JDpPJP
Malware Config
Signatures
Files
-
1ee82d86d54d81ed22b1991161dc07b438b41b16f60411a971c4bdd0f520b93a.exe windows x86
2272853e6c74ae7bd97ab20ac3e3fc5f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlCopyOutOfProcessMemoryStreamTo
NtQueryKey
advapi32
SetSecurityInfo
kernel32
Process32NextW
GetProcessHeap
oleaut32
VarBoolFromUI2
ole32
IsAccelerator
user32
GetKBCodePage
GetDoubleClickTime
Sections
.text Size: 716KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE