Static task
static1
Behavioral task
behavioral1
Sample
f27b7851938a13e2ddcb50f5c12c3c6873edde2bd5856db69a448b7da2268d26.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f27b7851938a13e2ddcb50f5c12c3c6873edde2bd5856db69a448b7da2268d26.exe
Resource
win10v2004-20221111-en
General
-
Target
f27b7851938a13e2ddcb50f5c12c3c6873edde2bd5856db69a448b7da2268d26
-
Size
1.4MB
-
MD5
d7c69d01197a39921738367d9155d489
-
SHA1
2c6748c809030d4222f133ad54053ca5b67c1675
-
SHA256
f27b7851938a13e2ddcb50f5c12c3c6873edde2bd5856db69a448b7da2268d26
-
SHA512
0df44840cb4f5d631d286f6299d5094299de4341c82246883457a614ac9c3fc5f9ba24257d27b30325904123c2adf3501f670714cdee3f604c30d8d4e92c95d2
-
SSDEEP
24576:km7WJ9G+jFtpJn7SLibLHlJvsLrS6L5fczyA6djDE8ad6Tz86EeHieAK/PiWWtuj:HYG+jFt0ibLHEJNczyj9FawwuAKnU05
Malware Config
Signatures
Files
-
f27b7851938a13e2ddcb50f5c12c3c6873edde2bd5856db69a448b7da2268d26.exe windows x86
8b46e1c1c99c9d13aa464461d7b79f70
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
kernel32
GetSystemDirectoryA
advapi32
CloseServiceHandle
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromProgID
wininet
InternetTimeToSystemTimeA
msvcrt
vsprintf
shlwapi
PathFileExistsA
oleaut32
SysAllocString
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 668KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aej Size: 799KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aej Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ