?FinanceAssist@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
c28cdc30da28c16fa06a808475bc0c7eca5420062962069e37f3564f2f4773bd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c28cdc30da28c16fa06a808475bc0c7eca5420062962069e37f3564f2f4773bd.exe
Resource
win10v2004-20220812-en
General
-
Target
c28cdc30da28c16fa06a808475bc0c7eca5420062962069e37f3564f2f4773bd
-
Size
181KB
-
MD5
780c7b948e039373481a090f797e0a47
-
SHA1
626ffb6c44d030445af4f5db87c582c5d13b5853
-
SHA256
c28cdc30da28c16fa06a808475bc0c7eca5420062962069e37f3564f2f4773bd
-
SHA512
bb2b82bc420ce20b3bcb759ea6b644029679750b2e63a1dc18e6ec14f000e4760e898ea0eab90f63ee44b85d1a6488c8ee311ef83deadab2ed0678b482dbcfeb
-
SSDEEP
3072:XRVfm9RPMChIemarXa2mHaBumCzeJrxth0TdEsMX2EX5NdvvFEAGUO0e:BVfmHkVAa2mDmCUHuTpzEXPdv9xxe
Malware Config
Signatures
Files
-
c28cdc30da28c16fa06a808475bc0c7eca5420062962069e37f3564f2f4773bd.exe windows x86
9bdcf0694fe2b92a64d98d6f5642d836
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
UrlIsOpaqueA
kernel32
lstrlenW
lstrcmpiW
Exports
Exports
Sections
.text Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t2 Size: 512B - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.t1 Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t4 Size: 512B - Virtual size: 438B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.t3 Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.t5 Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ