Static task
static1
Behavioral task
behavioral1
Sample
67a4340f5fba6ba61e546b8616f51dbbb9191381338f718250290a441ad31eca.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
67a4340f5fba6ba61e546b8616f51dbbb9191381338f718250290a441ad31eca.exe
Resource
win10v2004-20221111-en
General
-
Target
67a4340f5fba6ba61e546b8616f51dbbb9191381338f718250290a441ad31eca
-
Size
270KB
-
MD5
0111a3fd57e598b4ebd70cc880a1ec0d
-
SHA1
f00c1358d5e4cde4f4cabb115f0616ee4f90cfd1
-
SHA256
67a4340f5fba6ba61e546b8616f51dbbb9191381338f718250290a441ad31eca
-
SHA512
4b4f8ad8a8fc0c4d7646794dfcaf4ddc22ef8fd773eb40de22483ca87e358e4b41f82ae8651db4b3ccd1c312a6c5fb17f4101aecb9e73a25e5aeae668731616b
-
SSDEEP
6144:YBYOwhNRKosFBqNdzYerZW7m3qAdOdOXRoolVRK4+shxgNCop:YBYTNITKdYEZW7m3q2r6oBhCCop
Malware Config
Signatures
Files
-
67a4340f5fba6ba61e546b8616f51dbbb9191381338f718250290a441ad31eca.exe windows x86
bdad3d7a70d41c354870b377ea5fac0e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
comctl32
InitCommonControlsEx
shlwapi
SHAutoComplete
user32
EnableWindow
gdi32
GetDeviceCaps
advapi32
RegCloseKey
shell32
SHGetSpecialFolderLocation
ole32
CreateStreamOnHGlobal
oleaut32
VariantInit
Sections
.text Size: 66KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE