Static task
static1
Behavioral task
behavioral1
Sample
b850e1250145d38a8300ffa7990ec09edc700c64d0a2db12f590a999f29410a9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b850e1250145d38a8300ffa7990ec09edc700c64d0a2db12f590a999f29410a9.exe
Resource
win10v2004-20220901-en
General
-
Target
b850e1250145d38a8300ffa7990ec09edc700c64d0a2db12f590a999f29410a9
-
Size
61KB
-
MD5
3ae77f8e124546cadd43b6477b898f31
-
SHA1
a66dd9835fb3ce6c1ebe78721b54a43cd78c384c
-
SHA256
b850e1250145d38a8300ffa7990ec09edc700c64d0a2db12f590a999f29410a9
-
SHA512
7df217a0be7e008c438a6d9a66b9bfe4b804f97f0f9aa898bd411f18faf328264cf72698be332fbcbfd8de3c61949871fece35ab9afd14f7d7e717f97789b85c
-
SSDEEP
1536:B41HvL3JoJQZRT6SHFQ8XdMOChZD66jvQEb:B41HvL3JouZRT1HFQiyhZD6evQEb
Malware Config
Signatures
Files
-
b850e1250145d38a8300ffa7990ec09edc700c64d0a2db12f590a999f29410a9.exe windows x86
72ab22ae461ab0b83e85a30726e37e92
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegCloseKey
user32
CharNextA
oleaut32
SafeArrayCreate
urlmon
URLDownloadToFileA
Sections
.text Size: 54KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE