Static task
static1
Behavioral task
behavioral1
Sample
b637f3e6387539ba4bf1e34cd7561cf38c86e226f5874b8cf49f2d9648d80191.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b637f3e6387539ba4bf1e34cd7561cf38c86e226f5874b8cf49f2d9648d80191.exe
Resource
win10v2004-20220812-en
General
-
Target
b637f3e6387539ba4bf1e34cd7561cf38c86e226f5874b8cf49f2d9648d80191
-
Size
14KB
-
MD5
49df9323449ac868ab69bdb9d282acf8
-
SHA1
72b1369643fab1c9f03f2b072f3423ce4321c64f
-
SHA256
b637f3e6387539ba4bf1e34cd7561cf38c86e226f5874b8cf49f2d9648d80191
-
SHA512
fb750a85d1d2461cc35fd4d2aa6816453f45ee80e0127d6d9de3c69d79bed868c441f7178c821377bdb32eb075e0c7d885cf02a0cc6c9eeb8d6c081593ed481c
-
SSDEEP
192:UsxOGl2kQyWR/PT8umCI+o/OJrlGXQZPDs2TcTthfrADzSlk:XT8fa/olXDsH5NGzR
Malware Config
Signatures
Files
-
b637f3e6387539ba4bf1e34cd7561cf38c86e226f5874b8cf49f2d9648d80191.exe windows x86
d49477411ef4a5887379a7f914be5474
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
LocalFree
GetVersionExA
LocalAlloc
GetTickCount
user32
GetKeyboardType
MessageBoxA
LoadStringA
CharNextW
ole32
CreateStreamOnHGlobal
CoInitialize
ReleaseStgMedium
OleDraw
CoDisconnectObject
OleGetClipboard
CoUninitialize
CoGetMalloc
RevokeDragDrop
CoRegisterClassObject
IsAccelerator
OleInitialize
CoRevokeClassObject
OleSetClipboard
OleSetMenuDescriptor
ProgIDFromCLSID
CoGetClassObject
CoCreateInstance
CoLockObjectExternal
CoTaskMemAlloc
CreateDataAdviseHolder
RegisterDragDrop
StringFromCLSID
DoDragDrop
CoTaskMemFree
OleUninitialize
IsEqualGUID
ntdll
RtlInitUnicodeString
RtlAllocateHeap
RtlFreeHeap
RtlNtStatusToDosError
Sections
.text Size: 1024B - Virtual size: 582B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ