Static task
static1
Behavioral task
behavioral1
Sample
8b179ed7c53a38da772a39a65550d8bdcfc2cdaa21f0e181ec3ce07643931062.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8b179ed7c53a38da772a39a65550d8bdcfc2cdaa21f0e181ec3ce07643931062.exe
Resource
win10v2004-20220812-en
General
-
Target
8b179ed7c53a38da772a39a65550d8bdcfc2cdaa21f0e181ec3ce07643931062
-
Size
146KB
-
MD5
030c1c6b968723f11d0a343fd050f7bd
-
SHA1
f2da2dbdf59c264a6ed91724038735fa0c928cb7
-
SHA256
8b179ed7c53a38da772a39a65550d8bdcfc2cdaa21f0e181ec3ce07643931062
-
SHA512
3aa680a6a4f871a8b08db4a3e932ef28521bf82590d9639696376d4f1ab3855db3dc97edc59daca89d1d8813ff3e5ab673041b231cf119b699da9a17c6c4640c
-
SSDEEP
3072:a0ATQv7MAiPnsCMj71TVxCAHUIiZ5jDosNlPKf/YZiVfWSX:a0AEv7FesTjBRxCAHq5jDosPPKfQZsWi
Malware Config
Signatures
Files
-
8b179ed7c53a38da772a39a65550d8bdcfc2cdaa21f0e181ec3ce07643931062.exe windows x86
d975e67c56935cbdd8d15c60c37c5eb9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
VariantChangeTypeEx
gdi32
SetTextColor
winmm
waveOutGetPosition
Sections
CODE Size: 110KB - Virtual size: 624KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE