Static task
static1
Behavioral task
behavioral1
Sample
f88c1fe7369720fee14d2bf1cdf66c2c99ffb7f6afd6b76cdd6589b064369446.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f88c1fe7369720fee14d2bf1cdf66c2c99ffb7f6afd6b76cdd6589b064369446.exe
Resource
win10v2004-20220812-en
General
-
Target
f88c1fe7369720fee14d2bf1cdf66c2c99ffb7f6afd6b76cdd6589b064369446
-
Size
319KB
-
MD5
ed6aaff7b7e664a0088a34e1279cda3c
-
SHA1
5a900d5b7adaa727d2e7af140898a9a3dbf39933
-
SHA256
f88c1fe7369720fee14d2bf1cdf66c2c99ffb7f6afd6b76cdd6589b064369446
-
SHA512
4cea2038d0375912af10c896cf039cf592d4942c3cc600e8216accde00e914178549245a1c94088a52a448a2328d1c0129e61c6230601a4f57dc00b80e79bc80
-
SSDEEP
6144:EkuThnrGRqUQ8onBf4lgoYy5euKslcH+xZVxWO9EsREhMtBTDTK9za8cVN:h+hyRhQzBf4lgoVislcHwDN9Esn29u8s
Malware Config
Signatures
Files
-
f88c1fe7369720fee14d2bf1cdf66c2c99ffb7f6afd6b76cdd6589b064369446.exe windows x86
c42bf4107481f4960a34f220d5944482
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
shell32
ShellExecuteA
Sections
CODE Size: 305KB - Virtual size: 920KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE