Static task
static1
Behavioral task
behavioral1
Sample
f5195195d049fe8b6acfe5e2b133dd6e2aecbd693da80f816334c42cc2eb8195.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f5195195d049fe8b6acfe5e2b133dd6e2aecbd693da80f816334c42cc2eb8195.exe
Resource
win10v2004-20220812-en
General
-
Target
f5195195d049fe8b6acfe5e2b133dd6e2aecbd693da80f816334c42cc2eb8195
-
Size
284KB
-
MD5
e907d6b8da0a714ea8e8deb8016c9dc2
-
SHA1
24f35d462bc9ccf46e49d419b479ec08c18df21b
-
SHA256
f5195195d049fe8b6acfe5e2b133dd6e2aecbd693da80f816334c42cc2eb8195
-
SHA512
303b229e71f8be54a5828111583fa05d4701744e1ae8be62182ba4bbba2dddf4a981f1860a0bd18b736ffff13e18a2fbd6575dbb3609ef96094145d198ee4b52
-
SSDEEP
6144:jo46GJ4a5gze04GfJayQwX+tlzWhUnZ7RZ0FvI+frSVVcZ:chGJ7azeXxBy+tQhihL0Fw+fSVcZ
Malware Config
Signatures
Files
-
f5195195d049fe8b6acfe5e2b133dd6e2aecbd693da80f816334c42cc2eb8195.exe windows x86
7915330e7f9a1d01d954a90ff8d10b03
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
Sections
pec1 Size: 225KB - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE