Static task
static1
Behavioral task
behavioral1
Sample
a0db19892dcdf3d20081d714d115b24085503a3f67bf748005c1d313fb2ab14f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a0db19892dcdf3d20081d714d115b24085503a3f67bf748005c1d313fb2ab14f.exe
Resource
win10v2004-20220901-en
General
-
Target
a0db19892dcdf3d20081d714d115b24085503a3f67bf748005c1d313fb2ab14f
-
Size
287KB
-
MD5
03f04cd19dea5d38f8fb0a54b15569a7
-
SHA1
206640afad554bccebcf51ef04a32b6e7c3afdc7
-
SHA256
a0db19892dcdf3d20081d714d115b24085503a3f67bf748005c1d313fb2ab14f
-
SHA512
86d001df6b541cad00ec0bba7079891e607668fcad358b34275d5424b6d1cf2e4e8e4f38afa4835b305c58466229250291d0630e80afda8548e0171566bd8194
-
SSDEEP
6144:vd0ite0AhDd6OIdnX7qr0TAU8UFjsPM24HMKC:vdu/Rd6jtLqrwOUFjsqR
Malware Config
Signatures
Files
-
a0db19892dcdf3d20081d714d115b24085503a3f67bf748005c1d313fb2ab14f.exe windows x86
10a9ed22f7ae96608dfc452d33caebca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
SHGetSpecialFolderPathA
wsock32
WSAStartup
wininet
InternetGetConnectedState
avicap32
capGetDriverDescriptionA
rasapi32.dll�
RasEnumEntriesA
Sections
CODE Size: 246KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE