Static task
static1
Behavioral task
behavioral1
Sample
29668a205f957ce7bb0b5983e181468f57c5d0c58cbc154c42c7d033bf97f4e1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
29668a205f957ce7bb0b5983e181468f57c5d0c58cbc154c42c7d033bf97f4e1.exe
Resource
win10v2004-20220812-en
General
-
Target
29668a205f957ce7bb0b5983e181468f57c5d0c58cbc154c42c7d033bf97f4e1
-
Size
223KB
-
MD5
cdd609b79a63871300739fca4e60a492
-
SHA1
d3a116f8a44b9c48cd4384c9f9e210d2be711029
-
SHA256
29668a205f957ce7bb0b5983e181468f57c5d0c58cbc154c42c7d033bf97f4e1
-
SHA512
dde6a7409b689648514590a02c7e4ce91ea581eb7b1fdc5dd89ed03c7182f3d2a67a68373032efdcb102b65438dc72d436ee6b49a332748c0f10183dcf8a2d57
-
SSDEEP
3072:rz23XHKQH+jmluzjofpZ4HE4HNE7uglbIuU8Q6eZI/ggjQ17TY1xxNu47jNYXDuN:v2HGOuE4Hgxe0IIY4O7SxNucNIaKl
Malware Config
Signatures
Files
-
29668a205f957ce7bb0b5983e181468f57c5d0c58cbc154c42c7d033bf97f4e1.exe windows x86
c136baad615a1e1880f5e5b30e6e9e1d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
wininet
InternetReadFile
imm32
ImmGetIMEFileNameA
Sections
CODE Size: 189KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE