Static task
static1
Behavioral task
behavioral1
Sample
7bb89cb564bcce7154e10cdb79f8a38423435f5285402735e041d426c4bb9fa8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7bb89cb564bcce7154e10cdb79f8a38423435f5285402735e041d426c4bb9fa8.exe
Resource
win10v2004-20220812-en
General
-
Target
7bb89cb564bcce7154e10cdb79f8a38423435f5285402735e041d426c4bb9fa8
-
Size
44KB
-
MD5
0c20bbdcb4cc5a05e21155c79df59e4f
-
SHA1
edd6e2ef32f6de76dd534763d51b17d5778e047f
-
SHA256
7bb89cb564bcce7154e10cdb79f8a38423435f5285402735e041d426c4bb9fa8
-
SHA512
b534d80361dd2796c60720ded9e45f607e143dc51f10f1fc213633b4081e66e2994627368e2255a8895eee332a672eaac3c3d0a82e6e1d8874bfd0892d77ffee
-
SSDEEP
768:xeEPfsbr2GwZ1SRX2XrVQy508Rv/IgQnOorbxkhqDove/v7pe0Z33D:cjP+Um7VQyNQnlbxkhqEve9l
Malware Config
Signatures
Files
-
7bb89cb564bcce7154e10cdb79f8a38423435f5285402735e041d426c4bb9fa8.exe windows x86
29d4d9a4e535bff721362e89820bef9e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 39KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE