Static task
static1
Behavioral task
behavioral1
Sample
8b7f30b19c662016a1d57fc7a87686c34ba5bf3be4cde7963d288312d6a7835d.exe
Resource
win7-20221111-en
General
-
Target
8b7f30b19c662016a1d57fc7a87686c34ba5bf3be4cde7963d288312d6a7835d
-
Size
45KB
-
MD5
35ef17feb8dac8aa742f38d7f7b37336
-
SHA1
943594766c46f183c27093d0d403b7ec8b7db4ea
-
SHA256
8b7f30b19c662016a1d57fc7a87686c34ba5bf3be4cde7963d288312d6a7835d
-
SHA512
6332651bae978d3a9db34f8913849808edbfdef8842fc7a81d461c4d0095aee13b24cd8b0a523aa3f5d4ba04a04c07078e735ce98a098405a83f26a06bd147e2
-
SSDEEP
768:gDONULnKSiDPxJDYZlrPW9ZSg4S0fKtcx8Jrg0vTLH4RcPOAKIsLSLCT/s2:gJKS8xdq0PqKtcSM4TLQcPOAKdoCTk2
Malware Config
Signatures
Files
-
8b7f30b19c662016a1d57fc7a87686c34ba5bf3be4cde7963d288312d6a7835d.exe windows x86
231425377893abb7b2ff9764e70528f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetOpenEnumA
version
VerQueryValueA
wsock32
WSACleanup
winmm
waveOutSetVolume
Sections
CODE Size: 35KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLicen Size: 54B - Virtual size: 54B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE