Static task
static1
Behavioral task
behavioral1
Sample
1f2d9f99859c6107329bc29d43104b9eeb20836774ee72c40ac45fee00fe5c30.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1f2d9f99859c6107329bc29d43104b9eeb20836774ee72c40ac45fee00fe5c30.exe
Resource
win10v2004-20220812-en
General
-
Target
1f2d9f99859c6107329bc29d43104b9eeb20836774ee72c40ac45fee00fe5c30
-
Size
347KB
-
MD5
d14b28c2ecc937e9c31aef5c5e6f0763
-
SHA1
0616ad45e39e748a6c327c3f5fd8003fff1f7ca7
-
SHA256
1f2d9f99859c6107329bc29d43104b9eeb20836774ee72c40ac45fee00fe5c30
-
SHA512
abf14a0bc65a2ae72eaf1c96ea9622736afca4c3fff3bcf034acfa0518e3c3998f82167e4e37a34e1ffd3a053707663ec9f1db28146682f785f5ee15f6fb05ad
-
SSDEEP
6144:M09GxZ45654PZvJv4x3E+EJbpquTtO9x9UXspmjWpgjThNH/ymUAsNx23QCTe:y7456CZRv469JYGtOF2CjINHUAsSji
Malware Config
Signatures
Files
-
1f2d9f99859c6107329bc29d43104b9eeb20836774ee72c40ac45fee00fe5c30.exe windows x86
69e69176c0d34d49d331d7a69f90a3e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoTaskMemAlloc
comctl32
ImageList_SetIconSize
wsock32
WSACleanup
Sections
UnPackEr Size: 335KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE