Static task
static1
Behavioral task
behavioral1
Sample
917bb6f41d849857b2667150fa21990a89653527f4bd1cd2eb93440bf6906324.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
917bb6f41d849857b2667150fa21990a89653527f4bd1cd2eb93440bf6906324.exe
Resource
win10v2004-20221111-en
General
-
Target
917bb6f41d849857b2667150fa21990a89653527f4bd1cd2eb93440bf6906324
-
Size
169KB
-
MD5
62aed6400ee29c51263f554525ee53b4
-
SHA1
fe9ac7f33fce0b34c8f4647d2dd8addd3ec8d52a
-
SHA256
917bb6f41d849857b2667150fa21990a89653527f4bd1cd2eb93440bf6906324
-
SHA512
4fb58557f5397f98d7a71fbe541b34c97ed3a30207202a9781d541fd12562c35d5e63a1421d97c52453dda3fa9e179ef22b6c8db79c8546162d11e438fb00e60
-
SSDEEP
3072:BIb/Lv1YeqTssqvWfJN/mCpStVptNLKlkDBEFXcetnY6K5HPlROe6x/qTFH5:qN0PfyTtVNLKlrFsos6x/c
Malware Config
Signatures
Files
-
917bb6f41d849857b2667150fa21990a89653527f4bd1cd2eb93440bf6906324.exe windows x86
f6ced02617181defbf7e17c76a9427b1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetKeyboardType
MessageBoxA
kernel32
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep
advapi32
RegQueryValueExA
oleaut32
SysFreeString
urlmon
HlinkNavigateString
Sections
.text Size: 22KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE