Static task
static1
Behavioral task
behavioral1
Sample
d156e3c1587199d0f99f1b7293e309e4b14d1c7e2916a66f88c819025199bf5e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d156e3c1587199d0f99f1b7293e309e4b14d1c7e2916a66f88c819025199bf5e.exe
Resource
win10v2004-20221111-en
General
-
Target
d156e3c1587199d0f99f1b7293e309e4b14d1c7e2916a66f88c819025199bf5e
-
Size
171KB
-
MD5
03aabd4b03243b28e93ae6039e4f30ad
-
SHA1
68a5542915c966096b484d8cdf8aee90e651eeff
-
SHA256
d156e3c1587199d0f99f1b7293e309e4b14d1c7e2916a66f88c819025199bf5e
-
SHA512
0d12eaae8a5877d9d23de1c81c7bf93ec09d1ab28a54846d21fa9617f19a8f0125dc03e62dfe66d5a69bb8989947d0d25bb9774af35e6afa493cd5de3337d91f
-
SSDEEP
3072:22WGVchdFc2L4k5W5C8o1HLL7rIzRe0VvaX7q3Mzih1K69sG8:XWectc2QC8gHH/Ide0J69zizGG8
Malware Config
Signatures
Files
-
d156e3c1587199d0f99f1b7293e309e4b14d1c7e2916a66f88c819025199bf5e.exe windows x86
045241176a04d45cc5fb97c0f4bf6bcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
ole32
CoUninitialize
comctl32
_TrackMouseEvent
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 164KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE