Static task
static1
Behavioral task
behavioral1
Sample
da1a8c4d90d79bb6177fa1c9a68e85b2ebbbb370a772394641816ee51c8678f5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
da1a8c4d90d79bb6177fa1c9a68e85b2ebbbb370a772394641816ee51c8678f5.exe
Resource
win10v2004-20220901-en
General
-
Target
da1a8c4d90d79bb6177fa1c9a68e85b2ebbbb370a772394641816ee51c8678f5
-
Size
49KB
-
MD5
0cab890483f7e1d8143d0e4e2c5dd075
-
SHA1
968cc49ae5549d4bac051ab1fe1bdb734f9cf8aa
-
SHA256
da1a8c4d90d79bb6177fa1c9a68e85b2ebbbb370a772394641816ee51c8678f5
-
SHA512
6a6b715868e36c7d8b03d92d5a7f4a63fd11d1928f9248d3815ed521d7a05ef6181dea12dc09cfa217688c774939c74496d3f6b73f11d658b3ce82ad8f6ded47
-
SSDEEP
768:CV16fVc5TemT35/UUTWZW6o7g0yk4bN1nK6luyqI0vlJOG/sbn9DhJymd/2O:H2TemT35sWE08bjnK64rOxamdn
Malware Config
Signatures
Files
-
da1a8c4d90d79bb6177fa1c9a68e85b2ebbbb370a772394641816ee51c8678f5.exe windows x86
29d4d9a4e535bff721362e89820bef9e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 37KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE