Static task
static1
Behavioral task
behavioral1
Sample
b7385a8b8bee879c9fd6f77da7ac8b361e6961721486618b46dbb53ebafb811d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b7385a8b8bee879c9fd6f77da7ac8b361e6961721486618b46dbb53ebafb811d.exe
Resource
win10v2004-20221111-en
General
-
Target
b7385a8b8bee879c9fd6f77da7ac8b361e6961721486618b46dbb53ebafb811d
-
Size
516KB
-
MD5
5fcaad14fd595918fd70e9a0fbd80422
-
SHA1
668beedb6bf160e22ca9c7dec9aad682d3addcc9
-
SHA256
b7385a8b8bee879c9fd6f77da7ac8b361e6961721486618b46dbb53ebafb811d
-
SHA512
f1c19dbb85a438e38eac52e07f7a1acc74e7fdff3a63ab416b192812be06c65ada2e868dc6f99dffd7516c58b89cee5b7417b0642bf22d3dc4dbd28230a74916
-
SSDEEP
12288:sIkOanbv9Tr4vIeLDw97cTv1KdoNsMk6xpQ8Cp4p/b:5Wbv9TkvIsMlUKd9MkXDk/b
Malware Config
Signatures
Files
-
b7385a8b8bee879c9fd6f77da7ac8b361e6961721486618b46dbb53ebafb811d.exe windows x86
c42bf4107481f4960a34f220d5944482
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
shell32
ShellExecuteA
Sections
CODE Size: 87KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE