Static task
static1
Behavioral task
behavioral1
Sample
4fa6fb588bd1547dc0d856074e83b07cf7faaaba8a0fa544e16eda8d73bdedef.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4fa6fb588bd1547dc0d856074e83b07cf7faaaba8a0fa544e16eda8d73bdedef.exe
Resource
win10v2004-20220901-en
General
-
Target
4fa6fb588bd1547dc0d856074e83b07cf7faaaba8a0fa544e16eda8d73bdedef
-
Size
1.3MB
-
MD5
de8031d92c21ad196daefbef923cd6a1
-
SHA1
a72f5bd80406e6f40a7c3130430c0e9262967993
-
SHA256
4fa6fb588bd1547dc0d856074e83b07cf7faaaba8a0fa544e16eda8d73bdedef
-
SHA512
3dad88d188ac39a84760e712ea9a715a03bb0077571735d8e6afcfca3ea0a955dd8abe46cf66d6a474fab85b2ee56862c9fe6e7f1add707639768e2ccd775e87
-
SSDEEP
24576:lUGciGLFnSzDI/bzEi+Z+Z9WQ5idp1nWF1+YjXN/WUzCRpNNbM:lUGMnSz0/bz7+ZOWTp1nWFQYjEM+5M
Malware Config
Signatures
Files
-
4fa6fb588bd1547dc0d856074e83b07cf7faaaba8a0fa544e16eda8d73bdedef.exe windows x86
c5b1b3a6ce1dc958e6ab3a9c11f9fa89
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
borlndmm
@Borlndmm@SysGetMem$qqri
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
IsEqualGUID
shell32
Shell_NotifyIconA
wsock32
WSACleanup
comctl32
ImageList_Destroy
Sections
CODE Size: 1.3MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE