Static task
static1
Behavioral task
behavioral1
Sample
96bcd74dc87b835ed225fe754975c5f595a6951d503e9e7ca027748645be3dd3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
96bcd74dc87b835ed225fe754975c5f595a6951d503e9e7ca027748645be3dd3.exe
Resource
win10v2004-20220812-en
General
-
Target
96bcd74dc87b835ed225fe754975c5f595a6951d503e9e7ca027748645be3dd3
-
Size
270KB
-
MD5
7c45bdaf8919499fc31986fd129f3baa
-
SHA1
e41e171a5a0a6e543bd177ea6c23132051d3cae1
-
SHA256
96bcd74dc87b835ed225fe754975c5f595a6951d503e9e7ca027748645be3dd3
-
SHA512
fda6000e059be76facb4d838954e0c4c527a855745ce81557ce7f65c56188ce9a9ac9c744581399f0ecd6dda49028d886c3c815871d3f9314c9d72804764003d
-
SSDEEP
6144:2Bhr2U8nobKSQaBH6CaMJiDjza6hQqlY/h8ZXmUxEzV/muKWq:2xXKHKbom0AmmUxMxrKWq
Malware Config
Signatures
Files
-
96bcd74dc87b835ed225fe754975c5f595a6951d503e9e7ca027748645be3dd3.exe windows x86
51fbe1702e3fff2b56e69f7bc6bee3ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
GetKeyboardType
gdi32
SetTextColor
version
VerQueryValueW
gdiplus
GdipSetStringFormatTrimming
ole32
CreateStreamOnHGlobal
wininet
InternetReadFile
comdlg32
GetSaveFileNameW
crypt32
CryptBinaryToStringW
ntdll
NtShutdownSystem
shell32
SHGetSpecialFolderPathW
comctl32
InitCommonControls
Sections
.text Size: 255KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE