Static task
static1
Behavioral task
behavioral1
Sample
9d31d52984580fee8b4c75f201db18bb94d6ff9b50f2e0c1c6952854bd073975.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9d31d52984580fee8b4c75f201db18bb94d6ff9b50f2e0c1c6952854bd073975.exe
Resource
win10v2004-20221111-en
General
-
Target
9d31d52984580fee8b4c75f201db18bb94d6ff9b50f2e0c1c6952854bd073975
-
Size
198KB
-
MD5
4eb19209175284407130fb054b9edaba
-
SHA1
082548415d99df9324ea7d142b434a460d3677f5
-
SHA256
9d31d52984580fee8b4c75f201db18bb94d6ff9b50f2e0c1c6952854bd073975
-
SHA512
cd05909f928760ed9a1385f257d0d69651171f906f39ce5ac76b78b94d514fe40239350fd3cd0c51f343530e09cf150473eaa3be0e2ef5f5538b44cea3303a92
-
SSDEEP
6144:4eHcesUtXsc0tn6k/UvItv6uEG0vg1FMHU4D:ceOTtnQvgyu90Ik0Y
Malware Config
Signatures
Files
-
9d31d52984580fee8b4c75f201db18bb94d6ff9b50f2e0c1c6952854bd073975.exe windows x86
c42bf4107481f4960a34f220d5944482
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
shell32
ShellExecuteA
Sections
CODE Size: 130KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE