Static task
static1
Behavioral task
behavioral1
Sample
df63b42739a797ccba5c4e7ebfd6f861be9f0f35dd7d11e66b637f66cf313a0a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
df63b42739a797ccba5c4e7ebfd6f861be9f0f35dd7d11e66b637f66cf313a0a.exe
Resource
win10v2004-20220812-en
General
-
Target
df63b42739a797ccba5c4e7ebfd6f861be9f0f35dd7d11e66b637f66cf313a0a
-
Size
81KB
-
MD5
e155b6aebc3f63f59d4b7a99dfc9429d
-
SHA1
73df95af9da81523549751cb943ca1bd1864e99b
-
SHA256
df63b42739a797ccba5c4e7ebfd6f861be9f0f35dd7d11e66b637f66cf313a0a
-
SHA512
7e1833311c8f28bb1a3a179d9c91e4d65cfed11260aea40cbedfa49dbf11f011c324cd65cbd6c3e254d0dc9cc4df8cb8e997f26ed7a7723a03b71ffa5c4520f6
-
SSDEEP
1536:pn2iP9LLC0JfcEGdDkyIgiTzDIHeiZ1UX8V8YbsPo74q0AegbeQeBIx:ptVLC0ild3riTzDkZCQsHgbeQeBIx
Malware Config
Signatures
Files
-
df63b42739a797ccba5c4e7ebfd6f861be9f0f35dd7d11e66b637f66cf313a0a.exe windows x86
dd932b1a8f5caa7c6742dce50c0a7c23
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
wininet
InternetSetOptionA
Sections
.text Size: 64KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE