Static task
static1
Behavioral task
behavioral1
Sample
9490899005c31c7af60571a191cbab3679664a56f7bebda04d0b0a1ed5e8ef11.exe
Resource
win7-20221111-en
General
-
Target
9490899005c31c7af60571a191cbab3679664a56f7bebda04d0b0a1ed5e8ef11
-
Size
299KB
-
MD5
5b2878bde162b05a35e8ac3fb5493d39
-
SHA1
6db7827bb7477099df5979261580aaf0168c1d55
-
SHA256
9490899005c31c7af60571a191cbab3679664a56f7bebda04d0b0a1ed5e8ef11
-
SHA512
cc6e1d220a8b06ca28d525b1fbfa294c3fc95ae6cfcb2e5a1249a118190497ffc50dd91ef3a2f4da830b40d4b5068dad129ffaca42424dfeb5dc5e8a868d9464
-
SSDEEP
6144:S/MiSVwdZnKAu6DJYTdy1k9go5p5S0U28jdr//SNPjk9iXiFssCJSY:S/Mi4wPXu+JYTdy1kd5pXMl/oPjIFP7Y
Malware Config
Signatures
Files
-
9490899005c31c7af60571a191cbab3679664a56f7bebda04d0b0a1ed5e8ef11.exe windows x86
c42bf4107481f4960a34f220d5944482
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
shell32
ShellExecuteA
Sections
CODE Size: 292KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE