Static task
static1
Behavioral task
behavioral1
Sample
9dfd850597f417210b4be88ea8fafb29372e02f1a950041c1b4be114a155c568.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9dfd850597f417210b4be88ea8fafb29372e02f1a950041c1b4be114a155c568.exe
Resource
win10v2004-20221111-en
General
-
Target
9dfd850597f417210b4be88ea8fafb29372e02f1a950041c1b4be114a155c568
-
Size
182KB
-
MD5
13f8e0b42e1f65e04487746ca23e66d1
-
SHA1
9964d0144cfdf908489101bc566861bd90d5136d
-
SHA256
9dfd850597f417210b4be88ea8fafb29372e02f1a950041c1b4be114a155c568
-
SHA512
0e0e1362ac103df9c73fe0aaeb60e47e27c3e25d266f13285ac098ca153e09c2456e82c220c09830c9789ccdb09725344a7905854807ec14d66b783f1903fb8a
-
SSDEEP
1536:cHLNyAIMaCiujLqTxU7d+ILNP16jCJQL6O4F98mL75hihbaOe4AfOBdyP4LG9LQK:QZyAhaCdLDpNPYjCJ3rfQJzaMK4T3c
Malware Config
Signatures
Files
-
9dfd850597f417210b4be88ea8fafb29372e02f1a950041c1b4be114a155c568.exe windows x86
9534fcd0f693009c88102eb0630b67fe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
urlmon
HlinkNavigateString
Sections
CODE Size: 17KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE