Static task
static1
Behavioral task
behavioral1
Sample
2bfa6a10739fcdff44bfea117c4993db35a62b7cc15f12e4d73b86ac81bfc7c5.exe
Resource
win7-20220901-en
General
-
Target
2bfa6a10739fcdff44bfea117c4993db35a62b7cc15f12e4d73b86ac81bfc7c5
-
Size
280KB
-
MD5
0a19baa5b502f507c0262b7d6d4324c0
-
SHA1
71488c9a5af99e6063e78b1d40dce924c64b6d18
-
SHA256
2bfa6a10739fcdff44bfea117c4993db35a62b7cc15f12e4d73b86ac81bfc7c5
-
SHA512
1fa7e3fdaa92adf962df80c8c0da444e0433c4cc4f7cc931aa1fe77af932c66ae47391431cea78b1002d29ca1d591858859f90912ce1030a4d860d8a20ef6f7d
-
SSDEEP
6144:Llxw07oX6cKkhsNPhzOrOgOYA/AWdeeFUqthFIf6az67C:xx7vcKkhSP4a6sfs6am7C
Malware Config
Signatures
Files
-
2bfa6a10739fcdff44bfea117c4993db35a62b7cc15f12e4d73b86ac81bfc7c5.exe windows x86
c42bf4107481f4960a34f220d5944482
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
shell32
ShellExecuteA
Sections
CODE Size: 273KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE