Static task
static1
Behavioral task
behavioral1
Sample
b4ca041342234b40421d32e4eaa278da288fd70abdf4de1396518017c5c11d4f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b4ca041342234b40421d32e4eaa278da288fd70abdf4de1396518017c5c11d4f.exe
Resource
win10v2004-20221111-en
General
-
Target
b4ca041342234b40421d32e4eaa278da288fd70abdf4de1396518017c5c11d4f
-
Size
176KB
-
MD5
b2a7f7ae42ad8f70051537f3ca1cdd53
-
SHA1
a196eb6c2a1ee82324d0c189d8dad3564e19b0e5
-
SHA256
b4ca041342234b40421d32e4eaa278da288fd70abdf4de1396518017c5c11d4f
-
SHA512
e6253401e74ff2bba5834d4854737e4dcb5f966c998dcc9003f9ba96d238ff0527a0f22e4be3c6c312ed429328835017affaa32792849ab98ec939b079374d75
-
SSDEEP
3072:Hhs/NIo3zLnZMT9XzLz2Zn0W0iApK1HlvQH+2uXi/W1vL7l+I:HGJ3zor8rApK1HiMdH0
Malware Config
Signatures
Files
-
b4ca041342234b40421d32e4eaa278da288fd70abdf4de1396518017c5c11d4f.exe windows x86
b17d3cf8dc004d3722a9bfadf1151476
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
GetKeyboardType
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueW
ole32
OleUninitialize
comctl32
InitializeFlatSB
urlmon
URLDownloadToFileW
shell32
ShellExecuteW
Sections
.text Size: 166KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE