Static task
static1
Behavioral task
behavioral1
Sample
895184f0f0f39e03d11ae5c641ae2cd37a970e342126aef002688075c2b6125a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
895184f0f0f39e03d11ae5c641ae2cd37a970e342126aef002688075c2b6125a.exe
Resource
win10v2004-20221111-en
General
-
Target
895184f0f0f39e03d11ae5c641ae2cd37a970e342126aef002688075c2b6125a
-
Size
153KB
-
MD5
80d001df1d3d20e38637269a0b469cf1
-
SHA1
2dee59265a64a5858d134ec95e4e15ed1b3b9446
-
SHA256
895184f0f0f39e03d11ae5c641ae2cd37a970e342126aef002688075c2b6125a
-
SHA512
37d35c9029a6b2b2961c5ef282bf56cff206f5be97e711c391207f5cb117c75908ef494d91d422283b66501b43325bfe485acf85f8c8c825a1262a7bc147c104
-
SSDEEP
3072:WX/dpf+bfYs4JOjJnn3Buw3Rj3TfhA6N5TtHbTyrqdNrt1+NlaaTugBeiMZ5:WX/jWxuwlJNLHirqdNriNzleBZ
Malware Config
Signatures
Files
-
895184f0f0f39e03d11ae5c641ae2cd37a970e342126aef002688075c2b6125a.exe windows x86
08184e484af06f1fe8e0f065f7185a00
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
version
VerQueryValueW
ole32
CoUninitialize
shell32
SHGetPathFromIDListW
userenv
CreateEnvironmentBlock
Sections
.text Size: 146KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE