Static task
static1
Behavioral task
behavioral1
Sample
131a8b32a073561a1eb755a204e664974411f9d89a323f637a39e6c78904a18c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
131a8b32a073561a1eb755a204e664974411f9d89a323f637a39e6c78904a18c.exe
Resource
win10v2004-20221111-en
General
-
Target
131a8b32a073561a1eb755a204e664974411f9d89a323f637a39e6c78904a18c
-
Size
296KB
-
MD5
11146d81386b779d21998cca278e5800
-
SHA1
bf80a61b7fde471244b1a71df385c9a5ad310c0f
-
SHA256
131a8b32a073561a1eb755a204e664974411f9d89a323f637a39e6c78904a18c
-
SHA512
c85b2165a921006a8135f346a2b7d69b48a9803ff077bb7e2cc9bf7cba9944a510b75de77f72d51107b71a7e7140a1f18fd185ef1fbef4f7a462830020661ec4
-
SSDEEP
6144:HUUSk86b4QrgGoOjUehELd37yDzKMDl8SlnetsWWlqtGL+pN:HRH86bngSjUSExsdl8aeCWWAoLm
Malware Config
Signatures
Files
-
131a8b32a073561a1eb755a204e664974411f9d89a323f637a39e6c78904a18c.exe windows x86
29a447a303a6cf8357c37331ad3593c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
LoadStringW
advapi32
RegQueryValueExW
shell32
ShellExecuteW
ws2_32
socket
iphlpapi
GetAdaptersInfo
wtsapi32
WTSUnRegisterSessionNotification
Sections
.text Size: 67KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 227KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE