Static task
static1
Behavioral task
behavioral1
Sample
050e2b4d9d8f95e3d7649c526c7a92d31dd5b2be481ecc7741f2757583bdcdeb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
050e2b4d9d8f95e3d7649c526c7a92d31dd5b2be481ecc7741f2757583bdcdeb.exe
Resource
win10v2004-20220812-en
General
-
Target
050e2b4d9d8f95e3d7649c526c7a92d31dd5b2be481ecc7741f2757583bdcdeb
-
Size
25KB
-
MD5
4eb3de7e2e98a161a7e6240b22f89190
-
SHA1
87c1345faf695019e7bd45c0f3746b99d2d24aaa
-
SHA256
050e2b4d9d8f95e3d7649c526c7a92d31dd5b2be481ecc7741f2757583bdcdeb
-
SHA512
013c2cff9bd30fdd9df6c3cf712ff5180895bab43861b875b341ac54ea6ca0522fe02b084dc8c6ec3feeb7eff916d516567d69e42f5d0790335c51c2b0b402b9
-
SSDEEP
768:LqbKI+C2pbyw15X/WllPlqZrpvUG2/iuJ:AKI+C2pWw1kzNq7Mx/iu
Malware Config
Signatures
Files
-
050e2b4d9d8f95e3d7649c526c7a92d31dd5b2be481ecc7741f2757583bdcdeb.exe windows x86
6aca19fcc834d558ccd0d4e1d52008a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
strchr
user32
GetCursorPos
shlwapi
SHDeleteValueA
wininet
InternetSetOptionA
shell32
SHGetSpecialFolderPathA
advapi32
RegSetValueExA
ole32
CLSIDFromProgID
oleaut32
SysStringLen
msvcp60
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
Sections
.text Size: 19KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE