Static task
static1
Behavioral task
behavioral1
Sample
a244eea454fa52c9aa123d4e8190987ed77caab6ce559834f311969e4c5577eb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a244eea454fa52c9aa123d4e8190987ed77caab6ce559834f311969e4c5577eb.exe
Resource
win10v2004-20220812-en
General
-
Target
a244eea454fa52c9aa123d4e8190987ed77caab6ce559834f311969e4c5577eb
-
Size
269KB
-
MD5
1c0840352734fc4a456bbed5b94156f7
-
SHA1
d16bf464cb28a484647e45772638fac71139a845
-
SHA256
a244eea454fa52c9aa123d4e8190987ed77caab6ce559834f311969e4c5577eb
-
SHA512
3f11a272e96f38bc9fbf1027da41dc205ad6f6256697491bd0a6a7aee6aac66d32e79040f6346eb61e2041dcfa08d073d8bd055d0cfc528f2cf82267e129d27e
-
SSDEEP
6144:HDaGDHqNPq7n58eXsO5yN+naG38J46Jt+yDg6cMjZtTC5Qs3vfY+VZt:HDteA72ed5yOgtrgbfTHzVZ
Malware Config
Signatures
Files
-
a244eea454fa52c9aa123d4e8190987ed77caab6ce559834f311969e4c5577eb.exe windows x86
f251e63905aa3e04357a3755ce380175
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
ole32
CoTaskMemFree
comctl32
_TrackMouseEvent
winmm
waveOutWrite
Sections
.text Size: 246KB - Virtual size: 740KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE