Static task
static1
Behavioral task
behavioral1
Sample
69174503c184aae11f6b499aa370ea66322f87afe1caabea4479c1ca837c2911.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
69174503c184aae11f6b499aa370ea66322f87afe1caabea4479c1ca837c2911.exe
Resource
win10v2004-20221111-en
General
-
Target
69174503c184aae11f6b499aa370ea66322f87afe1caabea4479c1ca837c2911
-
Size
364KB
-
MD5
53869f420bdf5e931f3ed75b278e29f0
-
SHA1
3766f9a265d2a891304ea52ae32e7ef6e4526453
-
SHA256
69174503c184aae11f6b499aa370ea66322f87afe1caabea4479c1ca837c2911
-
SHA512
a4ecc788cf50008902bc1a20a53dde27a6cfa6064f1ee3aa5fdde509a91bfe7c8b4bc080fdf809dccd772be97e0e2ac1e340f6043061a99a595f6e2ed6793dd0
-
SSDEEP
6144:ZNybQYbDtm4ogwAaRMb416/eIAn3PviIFIfGVNriQNCkXO+SmIayRqPNb8AuuA37:D4PvFafv/bNGKCk+sB8Pp3
Malware Config
Signatures
Files
-
69174503c184aae11f6b499aa370ea66322f87afe1caabea4479c1ca837c2911.exe windows x86
0764c382eba0ffb43443c07a6c1f807c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleInitialize
CoCreateGuid
CoDisconnectObject
OleFlushClipboard
CoQueryProxyBlanket
CoRevokeClassObject
GetRunningObjectTable
CoInitialize
CoLockObjectExternal
CLSIDFromProgID
kernel32
GlobalLock
GetModuleHandleA
CreateEventA
FileTimeToLocalFileTime
InitializeCriticalSection
LCMapStringA
ReleaseMutex
IsValidCodePage
CreateFileA
SetStdHandle
GetStartupInfoA
GlobalAlloc
VirtualAlloc
GetLastError
GetFileAttributesA
GetEnvironmentStrings
InterlockedExchangeAdd
LeaveCriticalSection
GetLocaleInfoA
GetStringTypeA
DeleteCriticalSection
DeleteFileA
LockResource
LocalAlloc
FindCloseChangeNotification
HeapFree
ReadFile
LocalFree
mpr
WNetOpenEnumA
msvcrt
__dllonexit
_controlfp
_except_handler3
__set_app_type
_onexit
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__p__fmode
exit
_exit
_XcptFilter
__getmainargs
_acmdln
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 340KB - Virtual size: 337KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ