Static task
static1
Behavioral task
behavioral1
Sample
850349b24822e01dfa239bee1106bd9d919de17156fa8db5a251d260a131d6dd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
850349b24822e01dfa239bee1106bd9d919de17156fa8db5a251d260a131d6dd.exe
Resource
win10v2004-20221111-en
General
-
Target
850349b24822e01dfa239bee1106bd9d919de17156fa8db5a251d260a131d6dd
-
Size
380KB
-
MD5
e4564951d945d7eb4c1849d10964f90c
-
SHA1
0ab5e7ac1205d9f29a0ecf8c8d0fd3d4a5994cb1
-
SHA256
850349b24822e01dfa239bee1106bd9d919de17156fa8db5a251d260a131d6dd
-
SHA512
38739852a18b4da079e7ee566d51d1a076e5e68c37800d2ed0df00f44fa5b30fb1e2ae4ff0efa25e3d0e85b27472be413e62bfb15333604e646be1c6eb074426
-
SSDEEP
6144:S/oj9MmX4tsfm5E81Ufe1mU9yhL16GbJTMBgU2s1UZ7KkkrOBFjU70NspmHpus:Goj9RXWsuvee9yjP6BgU111k7XgpmHp
Malware Config
Signatures
Files
-
850349b24822e01dfa239bee1106bd9d919de17156fa8db5a251d260a131d6dd.exe windows x86
efdd90331cea675ce83bb08b6241d7f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
wsock32
WSACleanup
Sections
PEp0 Size: 368KB - Virtual size: 896KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE