Static task
static1
Behavioral task
behavioral1
Sample
8c546cfd14e6debd36e742af3ccc40cde550bf4d5e29b1553757836686a5e9b7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8c546cfd14e6debd36e742af3ccc40cde550bf4d5e29b1553757836686a5e9b7.exe
Resource
win10v2004-20221111-en
General
-
Target
8c546cfd14e6debd36e742af3ccc40cde550bf4d5e29b1553757836686a5e9b7
-
Size
267KB
-
MD5
e49ea2d4cad21ff42217489bfaf8cc20
-
SHA1
8f0c95dc7198d56e183791e2902f496f3d9243e5
-
SHA256
8c546cfd14e6debd36e742af3ccc40cde550bf4d5e29b1553757836686a5e9b7
-
SHA512
b0cbeb937368e174205258f846d0e51bb6beff7c314a40d4075c39373292d5c6301a6981a11438396d90dccd2cb65637c05e9f48268dce0a308958ed60626f3f
-
SSDEEP
6144:1IjLXyZ31Tvd3sHpo4FQN/QmwjJXCIhHd8vBUDAvaLfcza:CXuJv1+aqiIcvoAvaLEu
Malware Config
Signatures
Files
-
8c546cfd14e6debd36e742af3ccc40cde550bf4d5e29b1553757836686a5e9b7.exe windows x86
657284a64897985ba417e16d7c4e0b70
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoTaskMemFree
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
wsock32
WSACleanup
Sections
CODE Size: 256KB - Virtual size: 724KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE