Static task
static1
Behavioral task
behavioral1
Sample
8ff5cbb5da7d06609e086a40c759500c8035d854d013274e11cc44b08f0f9de8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ff5cbb5da7d06609e086a40c759500c8035d854d013274e11cc44b08f0f9de8.exe
Resource
win10v2004-20220812-en
General
-
Target
8ff5cbb5da7d06609e086a40c759500c8035d854d013274e11cc44b08f0f9de8
-
Size
207KB
-
MD5
0aa03f1ceaf2dcaeb30c7ef09968a0b0
-
SHA1
e68c1ef7a66a7dfc8ecfd31280497ee114306d9f
-
SHA256
8ff5cbb5da7d06609e086a40c759500c8035d854d013274e11cc44b08f0f9de8
-
SHA512
6917ab03a42689a9730cb69cfb933538406b613623470b8e21f1ea4762db0172113b2bcfb1f9383473771ac93e62d63c84542021355d613d91dbff730896f73d
-
SSDEEP
6144:U/TE/CG5Y3IqvsI7Mamfj079KahdPMRCB:oXmtaz0a7PMA
Malware Config
Signatures
Files
-
8ff5cbb5da7d06609e086a40c759500c8035d854d013274e11cc44b08f0f9de8.exe windows x86
cd755f0bd6c6325507b97d09eabbc9ad
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
urlmon
URLDownloadToFileA
Sections
CODE Size: 193KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE