Static task
static1
Behavioral task
behavioral1
Sample
616882d1c0b07f672f80a26cfbb2f95639ed438f78a800542e81b79715662240.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
616882d1c0b07f672f80a26cfbb2f95639ed438f78a800542e81b79715662240.exe
Resource
win10v2004-20221111-en
General
-
Target
616882d1c0b07f672f80a26cfbb2f95639ed438f78a800542e81b79715662240
-
Size
426KB
-
MD5
0879233cfb8c55bd4bed2f0005306248
-
SHA1
c77dd6669b082668814afb8d9d09869a5bd8140e
-
SHA256
616882d1c0b07f672f80a26cfbb2f95639ed438f78a800542e81b79715662240
-
SHA512
6bfcf956ff19ffc874a478037a47b1475ce9bea0a6c0d447c9e854a085c3ba51bcaf581923adc6a2c0a632f264b5a5e5f51e5f923bb636abeabc895f766e259a
-
SSDEEP
6144:Z3WGfSdzax2HxtriS9bgzRJinAVLvZuquwNRQm4ecs6BFuvBWfHHbTElMFX+XaWv:Z3WGrxKSSKzRcnRLsYEvBcnf+nur4Lx
Malware Config
Signatures
Files
-
616882d1c0b07f672f80a26cfbb2f95639ed438f78a800542e81b79715662240.exe windows x86
7ab7506604ac9abca2a39234e6422da6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
VariantChangeTypeEx
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
shell32
Shell_NotifyIconA
wsock32
WSACleanup
iphlpapi
GetIpAddrTable
winmm
timeSetEvent
d3d9
Direct3DCreate9
quartz
AMGetErrorTextA
Sections
CODE Size: 414KB - Virtual size: 912KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE