Static task
static1
Behavioral task
behavioral1
Sample
76b5606084d7fb8a7943269b03cdf827ef25439ce20de463b28243b33e2e1085.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
76b5606084d7fb8a7943269b03cdf827ef25439ce20de463b28243b33e2e1085.exe
Resource
win10v2004-20221111-en
General
-
Target
76b5606084d7fb8a7943269b03cdf827ef25439ce20de463b28243b33e2e1085
-
Size
497KB
-
MD5
bfcf6a2615afcffe63bada0650afb293
-
SHA1
49149c0ca02ef5a949cc0bd7e4034d470453d8f7
-
SHA256
76b5606084d7fb8a7943269b03cdf827ef25439ce20de463b28243b33e2e1085
-
SHA512
d58934d60692d725f789a5ef9114f699e566db16f5ab3986b13966aa9ed186b3a2429dbd7115e5a0dce3085f604d60f4422c444060d492ead809847a243bd575
-
SSDEEP
6144:PrLnD5OPXUz2Ej7hj/i3GBQ2I7/99mLcOcEgSta0jPL6KrQhzPVZCCPAOBv7:PTc/ULvQX19mJgScC6OQtNZS
Malware Config
Signatures
Files
-
76b5606084d7fb8a7943269b03cdf827ef25439ce20de463b28243b33e2e1085.exe windows x86
08091f58c19460f8f62e620a0023056b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
shell32
ShellExecuteExA
Sections
CODE Size: 372KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ohqkkhq Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE