Static task
static1
Behavioral task
behavioral1
Sample
528123dd1aa12ee0bf8c801479a7c8f2a098b8d5a62f4ba5a1b1a6c819646fa6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
528123dd1aa12ee0bf8c801479a7c8f2a098b8d5a62f4ba5a1b1a6c819646fa6.exe
Resource
win10v2004-20220812-en
General
-
Target
528123dd1aa12ee0bf8c801479a7c8f2a098b8d5a62f4ba5a1b1a6c819646fa6
-
Size
165KB
-
MD5
4936b6fb9b82f1aa75579ef3493f790c
-
SHA1
13314a4f46818b16537f743e7356ea2c649c8c7f
-
SHA256
528123dd1aa12ee0bf8c801479a7c8f2a098b8d5a62f4ba5a1b1a6c819646fa6
-
SHA512
04f869bc791c9dfe2a8fd96c19adc413e7cc3b7b302b0339465f7bc407b67f98c713d3fd68dc33bb8e4dc1528a3439279df5f321d51bc1867d1bcb33f5f1444b
-
SSDEEP
3072:BVnHOYENVTR+hR1QN+rZ/uggnpZgrMB6kHSGjeySmWSn9hei9LdCP0NuXrwziBtc:BQ1BR8QNyRDYYoBIge3SndpCTJZ
Malware Config
Signatures
Files
-
528123dd1aa12ee0bf8c801479a7c8f2a098b8d5a62f4ba5a1b1a6c819646fa6.exe windows x86
c3126ef8e972b54671d5a68dea41e025
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
InterlockedDecrement
lstrcmpiA
LoadLibraryExA
GetModuleHandleA
FindResourceA
lstrlenW
MultiByteToWideChar
ReadFile
IsDBCSLeadByte
EnumResourceTypesA
FindFirstFileExW
WideCharToMultiByte
lstrcpyA
CreateFileA
lstrcpynA
LoadResource
SizeofResource
FreeLibrary
InterlockedIncrement
oleacc
GetOleaccVersionInfo
CreateStdAccessibleObject
gdi32
GetStockObject
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ