Static task
static1
Behavioral task
behavioral1
Sample
471b5b669ddcc3ad70a0b974afac814d6af6a81a365f63fae1c0e474522289e8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
471b5b669ddcc3ad70a0b974afac814d6af6a81a365f63fae1c0e474522289e8.exe
Resource
win10v2004-20220812-en
General
-
Target
471b5b669ddcc3ad70a0b974afac814d6af6a81a365f63fae1c0e474522289e8
-
Size
45KB
-
MD5
93bafefc3eb77e1e4134e8e7a197c7e4
-
SHA1
6578cff0beca318634ee7b9605c61132f2c7f79a
-
SHA256
471b5b669ddcc3ad70a0b974afac814d6af6a81a365f63fae1c0e474522289e8
-
SHA512
e3e04eb29a372855bbb7cee6fdf0af427c95284d48b48894e480d074bba3d2f3405a8e0ab9769f5266d080224caf9f48868d7fb32dd1db07fbd7cfee2d458e54
-
SSDEEP
768:ywTukTPTBKhmGjam9HczJqoBRV+CsGlsdnBqhmef1hXLssk4fBf0YU7sw8Xd:yKNTPmTczJZbXPsdVI1lLh1Ysn
Malware Config
Signatures
Files
-
471b5b669ddcc3ad70a0b974afac814d6af6a81a365f63fae1c0e474522289e8.exe windows x86
29d4d9a4e535bff721362e89820bef9e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 39KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE