Static task
static1
Behavioral task
behavioral1
Sample
115c7924e0ad631734ebd7e20d5d8d19e283016379d2eea781aa9e703e139b76.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
115c7924e0ad631734ebd7e20d5d8d19e283016379d2eea781aa9e703e139b76.exe
Resource
win10v2004-20220812-en
General
-
Target
115c7924e0ad631734ebd7e20d5d8d19e283016379d2eea781aa9e703e139b76
-
Size
440KB
-
MD5
84e1083207668e6279f51ebdec0b89b0
-
SHA1
9a5a51db462e21e4d62d7bef6f01c23f8531d06b
-
SHA256
115c7924e0ad631734ebd7e20d5d8d19e283016379d2eea781aa9e703e139b76
-
SHA512
3165a5f0fe3fdc59a755f12fe5949f78318cfe4aa4d6a82c013c91d6e67c613980a45b6648770a93d7880c29eaccafeb6c49316fc2c497e8791c1dc2f686fb80
-
SSDEEP
12288:3TyAlAK3+3yBkZ3IzXSQ5WiiwX0o0S7vhu3QS7AzU:OTm6KSQYcvhu3vIU
Malware Config
Signatures
Files
-
115c7924e0ad631734ebd7e20d5d8d19e283016379d2eea781aa9e703e139b76.exe windows x86
50a924959cd5dabc82c6367dc6de018a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDefaultLCID
CreateToolhelp32Snapshot
GetLastError
advapi32
IsTokenUntrusted
ntdll
RtlDeleteAtomFromAtomTable
user32
GetInputState
Sections
.text Size: 433KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE