Static task
static1
Behavioral task
behavioral1
Sample
c2865fbbcec2210aa211f780e6e7b70a994af59de8e730334f6693aa9f9e3d38.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2865fbbcec2210aa211f780e6e7b70a994af59de8e730334f6693aa9f9e3d38.exe
Resource
win10v2004-20221111-en
General
-
Target
c2865fbbcec2210aa211f780e6e7b70a994af59de8e730334f6693aa9f9e3d38
-
Size
461KB
-
MD5
d19735783445246c371fe62913a39049
-
SHA1
e7ae3d09092120761c16f7c60a34e44b718eb568
-
SHA256
c2865fbbcec2210aa211f780e6e7b70a994af59de8e730334f6693aa9f9e3d38
-
SHA512
03ab933e1835bba9ad30ba5260b71cc0e7a319b1c56443b15b858ac6ab7d682f3b67753cf4262b65681ffd7c02f9ed2ecf9b7782a30640617e7e11b006019a9d
-
SSDEEP
6144:WhbkTekTDSCRJkMLm5xGdCIXEc/0E5ViwOT4ylHXmCGZkmapMUJ4ZhM0Wlci5096:4Mf7RHL0lIclT4yPaCH4iciu9mZqxu
Malware Config
Signatures
Files
-
c2865fbbcec2210aa211f780e6e7b70a994af59de8e730334f6693aa9f9e3d38.exe windows x86
effcd98e78101ba25faed36ace3b7658
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
comdlg32
GetOpenFileNameA
Sections
CODE Size: 452KB - Virtual size: 988KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE