Static task
static1
Behavioral task
behavioral1
Sample
467cfe583a33fe8acd549cb478abfed8d47afe8e3965821cdbce0936b54594d7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
467cfe583a33fe8acd549cb478abfed8d47afe8e3965821cdbce0936b54594d7.exe
Resource
win10v2004-20220812-en
General
-
Target
467cfe583a33fe8acd549cb478abfed8d47afe8e3965821cdbce0936b54594d7
-
Size
440KB
-
MD5
22117e05d2f6d8523c0770b11eef3960
-
SHA1
4f2463f9baa4c38581c971dd46854d692766cf45
-
SHA256
467cfe583a33fe8acd549cb478abfed8d47afe8e3965821cdbce0936b54594d7
-
SHA512
86e130859ee3c5d9eba9b5c37be6e7823595d7c9935c572760edba4c31cce19c1d6a2489a4b0dd8c8efddfdcc62bfc500acc280c9a70f08f32d59afb1d9a8d38
-
SSDEEP
12288:MbFnQrH+ghahG0EYhAWooEwj6zo8jMZFjLJm:8FQS/G0EYhAWmC6zoSww
Malware Config
Signatures
Files
-
467cfe583a33fe8acd549cb478abfed8d47afe8e3965821cdbce0936b54594d7.exe windows x86
aef52d8ed3564f4903039717ffea13fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwDuplicateToken
ZwLockProductActivationKeys
ole32
CoRevokeInitializeSpy
advapi32
GetInheritanceSourceA
user32
GetDesktopWindow
GetMenuCheckMarkDimensions
kernel32
GetUserDefaultUILanguage
Sections
.text Size: 433KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE