Static task
static1
Behavioral task
behavioral1
Sample
976124cdd8065a24f4060d083d22e8e6b981744cff569ec50e5daba6b1704e43.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
976124cdd8065a24f4060d083d22e8e6b981744cff569ec50e5daba6b1704e43.exe
Resource
win10v2004-20220901-en
General
-
Target
976124cdd8065a24f4060d083d22e8e6b981744cff569ec50e5daba6b1704e43
-
Size
147KB
-
MD5
50f7c95e13f7e1cae9f468612dc3f498
-
SHA1
33f14f5a4348296bf3670d2147b8bd5dea78cfca
-
SHA256
976124cdd8065a24f4060d083d22e8e6b981744cff569ec50e5daba6b1704e43
-
SHA512
5f1b3975b669a964477e268174627fd32781f655d2930553f3ccbeea8058a0bf55922411a148ee3cb0a863538318f26af82f49dd6fac89229da61fdb140e2d19
-
SSDEEP
3072:M/za7Q/G3d9fv4p31+5LoRPrIjullga9E6I6WpdYiO7TQhGLK07xNuj9:M/zP+3Lv4S5oZ2ElRa7R2mT0NN
Malware Config
Signatures
Files
-
976124cdd8065a24f4060d083d22e8e6b981744cff569ec50e5daba6b1704e43.exe windows x86
d2bbddb8c010773f04c2d9dd29668462
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
Sections
CODE Size: 133KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE