Static task
static1
Behavioral task
behavioral1
Sample
85183af37ce78be205dd967646d42a7f984b9de1f78c2ca422a922265d5d1856.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
85183af37ce78be205dd967646d42a7f984b9de1f78c2ca422a922265d5d1856.exe
Resource
win10v2004-20220812-en
General
-
Target
85183af37ce78be205dd967646d42a7f984b9de1f78c2ca422a922265d5d1856
-
Size
45KB
-
MD5
7bf03c337d89855828987b19c8c59a67
-
SHA1
5876b062bfc3426b40dd58f8b98c31c2ff6459c0
-
SHA256
85183af37ce78be205dd967646d42a7f984b9de1f78c2ca422a922265d5d1856
-
SHA512
fb2e709d944d5e2f08f4e1ec6c3bbee21e7d3455c090690973ec7101863b952f8f1f189bfc3b6e533a7a834d26834dd81f3fb00d00c263c8b9e52f35e550855b
-
SSDEEP
768:ywTukTPTBKhmGjam9HczJqoBRV+CsGlsdnBqhmef1hXLssk4fBf0YU7sw8Xj:yKNTPmTczJZbXPsdVI1lLh1Ys1
Malware Config
Signatures
Files
-
85183af37ce78be205dd967646d42a7f984b9de1f78c2ca422a922265d5d1856.exe windows x86
29d4d9a4e535bff721362e89820bef9e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 39KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE