Static task
static1
Behavioral task
behavioral1
Sample
f183d6b76a487f0fae6f459916907230ffedc6e12059a4ae8d6bb87ed437e543.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f183d6b76a487f0fae6f459916907230ffedc6e12059a4ae8d6bb87ed437e543.exe
Resource
win10v2004-20220812-en
General
-
Target
f183d6b76a487f0fae6f459916907230ffedc6e12059a4ae8d6bb87ed437e543
-
Size
129KB
-
MD5
b04497153ea1a834bf5fbb19ef865246
-
SHA1
f46c70ea8b7f4201770bbfe278502f46a84c4af2
-
SHA256
f183d6b76a487f0fae6f459916907230ffedc6e12059a4ae8d6bb87ed437e543
-
SHA512
bac2b62392d12f98e665ef54c19a72f1d5e012e5a5dca6ea0c5083293f219e205b345e0f6acfbbb1c76790a62c77155ede3906a16a9403ba4475a361e27e3dda
-
SSDEEP
3072:hdWttM8a14O1tHdR0456R2pN/UDtBrZbGEo2:hdWqCs60MBBrZbGEo2
Malware Config
Signatures
Files
-
f183d6b76a487f0fae6f459916907230ffedc6e12059a4ae8d6bb87ed437e543.exe windows x86
bc5b8814d162ef685058343329946846
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
CompareStringA
LoadLibraryA
LocalFree
GetProcAddress
GetVersion
LocalAlloc
user32
TranslateMessage
DispatchMessageA
CharNextA
CharPrevA
GetMessageA
advapi32
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ