Static task
static1
Behavioral task
behavioral1
Sample
90b6faf44c850fb459da86b0d722a0730b028e00eefb09bad40e3dcb9f3134d5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
90b6faf44c850fb459da86b0d722a0730b028e00eefb09bad40e3dcb9f3134d5.exe
Resource
win10v2004-20221111-en
General
-
Target
90b6faf44c850fb459da86b0d722a0730b028e00eefb09bad40e3dcb9f3134d5
-
Size
145KB
-
MD5
5fda929f447e11f9b8f2a1dd0088b770
-
SHA1
4373a60f2d899839353d64840660151b223fa306
-
SHA256
90b6faf44c850fb459da86b0d722a0730b028e00eefb09bad40e3dcb9f3134d5
-
SHA512
aa8636c4296bc8f78e7bd551d84ad22f4f9c865b4f789568023fb1896810f9bd3729eef22b2aacbd6fca64d175750853cc060d276c2e2db43f0c72173dd75608
-
SSDEEP
3072:z9BqUA7R+YiKSBaAZfgnWBjNZUFwD1OnjQ3g7nPnpVnEYi2MJygkGSg+wwOX:hgUWUBJcWBDewInUqpdEn2MEg7nn
Malware Config
Signatures
Files
-
90b6faf44c850fb459da86b0d722a0730b028e00eefb09bad40e3dcb9f3134d5.exe windows x86
08184e484af06f1fe8e0f065f7185a00
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
version
VerQueryValueW
ole32
CoUninitialize
shell32
SHGetPathFromIDListW
userenv
CreateEnvironmentBlock
Sections
.text Size: 138KB - Virtual size: 416KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE