Static task
static1
Behavioral task
behavioral1
Sample
f0427c8414bf6623d50ad882eeeac371dd30ec034b0017dd5d504903c97610ad.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f0427c8414bf6623d50ad882eeeac371dd30ec034b0017dd5d504903c97610ad.exe
Resource
win10v2004-20220812-en
General
-
Target
f0427c8414bf6623d50ad882eeeac371dd30ec034b0017dd5d504903c97610ad
-
Size
2.3MB
-
MD5
15a246a0e579767e1cdbd0c9f86e91e4
-
SHA1
f73383b63355ae15661bd704c7ad7e02c274a9ff
-
SHA256
f0427c8414bf6623d50ad882eeeac371dd30ec034b0017dd5d504903c97610ad
-
SHA512
b330135b30e1286df35711710fb96e64f0d4e3d7e6589df7b03e43b3d433a0e58e48dcb449e01df40ebacd045b246c5bf5f6b0970b0a134c0721bc5992d4e465
-
SSDEEP
49152:STKxUXNLXLd3TY2d5DpG8zvx6HSc5QlVcinGIrH5UCNH+:S2ad3vdrTwSc54cinJ5NN
Malware Config
Signatures
Files
-
f0427c8414bf6623d50ad882eeeac371dd30ec034b0017dd5d504903c97610ad.exe windows x86
911fd0ab7c953a71d5df127882920969
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
WinHelpA
ole32
OleRegGetUserType
shlwapi
StrFormatByteSize64A
gdi32
SetWindowOrgEx
advapi32
RegEnumKeyExA
oleaut32
GetActiveObject
Sections
.text Size: 2.2MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE