Static task
static1
Behavioral task
behavioral1
Sample
f8a72ac2152a9542951937e57bdc7a945dbbed0b227c6ff25c6364a1acb9abe7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f8a72ac2152a9542951937e57bdc7a945dbbed0b227c6ff25c6364a1acb9abe7.exe
Resource
win10v2004-20221111-en
General
-
Target
f8a72ac2152a9542951937e57bdc7a945dbbed0b227c6ff25c6364a1acb9abe7
-
Size
45KB
-
MD5
c36ad6d250bf4be725d31e8350341c93
-
SHA1
0a0038e9e5d56573d66df3c18eac0821b5f766d6
-
SHA256
f8a72ac2152a9542951937e57bdc7a945dbbed0b227c6ff25c6364a1acb9abe7
-
SHA512
34c4123f1616bbb591d3740ce848347a68e745615073648051a333194ee9e6214a6548fc5f023b13f1d92246e4c93a3180bebce4aeed5e24f596ad567d46d287
-
SSDEEP
768:/L8DYLj205FfrNMY0RDzZdS/yARZ7QjN/x+6H4kjwHyZ:/L8DWj2mmYqxc//RG2cYHU
Malware Config
Signatures
Files
-
f8a72ac2152a9542951937e57bdc7a945dbbed0b227c6ff25c6364a1acb9abe7.exe windows x86
29d4d9a4e535bff721362e89820bef9e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 39KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE