Static task
static1
Behavioral task
behavioral1
Sample
9ef50ae7587d43c1c3f58b7567676803f9cd830b383e916082e64294deedce9d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ef50ae7587d43c1c3f58b7567676803f9cd830b383e916082e64294deedce9d.exe
Resource
win10v2004-20220812-en
General
-
Target
9ef50ae7587d43c1c3f58b7567676803f9cd830b383e916082e64294deedce9d
-
Size
269KB
-
MD5
1f41a328c73922939c08f4a158d5698a
-
SHA1
b4edfed1c5a4b6b91673bcd31e5aca8156447b3a
-
SHA256
9ef50ae7587d43c1c3f58b7567676803f9cd830b383e916082e64294deedce9d
-
SHA512
31246829afa4ee018ffc1016b5d43d4450ffe41e94b711adbb6fca6e449b622a6d46e2f63fa8a5efefa1b334be13258f00e98074db22a5aef8e6996b42891277
-
SSDEEP
6144:bwXhRyq926tFIGBFrQee3Kc7vcIVYAEymU4v+GakMFcK:bwL7FrcHvcSEu+XaDFc
Malware Config
Signatures
Files
-
9ef50ae7587d43c1c3f58b7567676803f9cd830b383e916082e64294deedce9d.exe windows x86
51fbe1702e3fff2b56e69f7bc6bee3ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
GetKeyboardType
gdi32
SetTextColor
version
VerQueryValueW
gdiplus
GdipSetStringFormatTrimming
ole32
CreateStreamOnHGlobal
wininet
InternetReadFile
comdlg32
GetSaveFileNameW
crypt32
CryptBinaryToStringW
ntdll
NtShutdownSystem
shell32
SHGetSpecialFolderPathW
comctl32
InitCommonControls
Sections
.text Size: 255KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE