Static task
static1
Behavioral task
behavioral1
Sample
9f989b1e7ff766ec8906c74e7fbbbbe9928a648b8c1738159c6628313a51f825.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9f989b1e7ff766ec8906c74e7fbbbbe9928a648b8c1738159c6628313a51f825.exe
Resource
win10v2004-20220812-en
General
-
Target
9f989b1e7ff766ec8906c74e7fbbbbe9928a648b8c1738159c6628313a51f825
-
Size
45KB
-
MD5
0ba380f7b3b91d924e0929c600bd24d7
-
SHA1
a1f10768a35f4d942e0a2955e3cc973acd0c4b6c
-
SHA256
9f989b1e7ff766ec8906c74e7fbbbbe9928a648b8c1738159c6628313a51f825
-
SHA512
bca8bdbff273a84c27c076beb1021e417ef0a1cd3ef9f566530a4b3bbbfdd42e23e3cca3a77d9d0c3de75fbd5ee388701ecb0dfa4c8dc66ac06a5dbdc55ecb9b
-
SSDEEP
768:ywTukTPTBKhmGjam9HczJqoBRV+CsGlsdnBqhmef1hXLssk4fBf0YU7sw8XH:yKNTPmTczJZbXPsdVI1lLh1Yst
Malware Config
Signatures
Files
-
9f989b1e7ff766ec8906c74e7fbbbbe9928a648b8c1738159c6628313a51f825.exe windows x86
29d4d9a4e535bff721362e89820bef9e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 39KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE