Static task
static1
Behavioral task
behavioral1
Sample
59939e5aa875c7610300bb6bb2066a1eacc25a3ee1857c4799108f18b8ced1d9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
59939e5aa875c7610300bb6bb2066a1eacc25a3ee1857c4799108f18b8ced1d9.exe
Resource
win10v2004-20221111-en
General
-
Target
59939e5aa875c7610300bb6bb2066a1eacc25a3ee1857c4799108f18b8ced1d9
-
Size
79KB
-
MD5
83ffd9355a0d147874a69f10f5b33a1e
-
SHA1
260e337c49aab63eb63c12fddb1eff2f19c04ebf
-
SHA256
59939e5aa875c7610300bb6bb2066a1eacc25a3ee1857c4799108f18b8ced1d9
-
SHA512
111c14468dec6c47ff713ba5295eb112cd8a03db8ba6e21a4b39a8d4d9ee9d29bdec8b5068aa45a3438a0b43984250f3857a6eb10ea00c51f6db23dafafb1b2c
-
SSDEEP
1536:2d0pIEDc5O4RVHZhOYT3kRe3pUdCPu21JE86XZXDgo9G:2d0pIa+m23kRe3u215Cd
Malware Config
Signatures
Files
-
59939e5aa875c7610300bb6bb2066a1eacc25a3ee1857c4799108f18b8ced1d9.exe windows x86
0325fffcedf4b01f9ef8a68d3cb5d884
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
gdi32
TextOutA
winmm
waveOutGetPosition
Sections
CODE Size: 71KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE