Static task
static1
Behavioral task
behavioral1
Sample
dfed7402452991521acb091704a4fe01ef2e3d10847f602763c9839871ee0b3d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
dfed7402452991521acb091704a4fe01ef2e3d10847f602763c9839871ee0b3d.exe
Resource
win10v2004-20220901-en
General
-
Target
dfed7402452991521acb091704a4fe01ef2e3d10847f602763c9839871ee0b3d
-
Size
315KB
-
MD5
06a5aba85107ecaf0d421b0ea428753e
-
SHA1
19115c7d5330e1b136fbb9067950200f2d95eede
-
SHA256
dfed7402452991521acb091704a4fe01ef2e3d10847f602763c9839871ee0b3d
-
SHA512
bf62bc5a23319992dc1def1cc78ba86b6905b66f0996237dcb65c17e18f8f4325fb3f14f5cd5276f653441dba8b457fa76636d67060627f48b6120a4bc191af6
-
SSDEEP
6144:lWSG30eEMdPZg8Oy4NKScvjiewxSf7gVfAYTBcb7jRT4VH2W:Qn3B9dhZXv3wigVfAYT07lT4VW
Malware Config
Signatures
Files
-
dfed7402452991521acb091704a4fe01ef2e3d10847f602763c9839871ee0b3d.exe windows x86
0735452ae66e13a2ea6b5da8953195b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
ntdll
LdrGetDllHandle
NtUnmapViewOfSection
Sections
.text Size: 284KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE