Static task
static1
Behavioral task
behavioral1
Sample
990d077b29e9721ccae3af2fb8de8f23aa4381cc03a68f485477af7753476dfb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
990d077b29e9721ccae3af2fb8de8f23aa4381cc03a68f485477af7753476dfb.exe
Resource
win10v2004-20220812-en
General
-
Target
990d077b29e9721ccae3af2fb8de8f23aa4381cc03a68f485477af7753476dfb
-
Size
284KB
-
MD5
6e9482d4222b991b01e329d8ac4f9da4
-
SHA1
747bf210e9aebe8e98eb568d25dd421f47e69400
-
SHA256
990d077b29e9721ccae3af2fb8de8f23aa4381cc03a68f485477af7753476dfb
-
SHA512
187fe4b4bc6e97e7b524baa8eee9a1dbd361149fe2a6ce0527a931d2a2d95d58411675bf300b94948e8594e2a6241ef1924e549dc97ef5d92b4da7073f4b57ad
-
SSDEEP
6144:YxEKIoNuqnvX2/Qyj7hCnszVJdkiXom5v/JNilbtbbFxbUi8jI:YxEKIwvrRn+fdbFHNYb/YiW
Malware Config
Signatures
Files
-
990d077b29e9721ccae3af2fb8de8f23aa4381cc03a68f485477af7753476dfb.exe windows x86
597e318c69c43b053c82d438e825bd20
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
oleacc
CreateStdAccessibleObject
shlwapi
StrRetToStrA
PathIsContentTypeA
PathAppendA
PathIsFileSpecA
SHCreateStreamOnFileEx
PathCreateFromUrlW
kernel32
GetLocaleInfoW
GlobalHandle
FindAtomW
InterlockedExchange
RaiseException
TlsSetValue
HeapSetInformation
lstrlenA
TlsAlloc
lstrcmpW
SetLastError
TlsFree
GetTickCount
GlobalUnlock
FlushInstructionCache
CloseHandle
EnterCriticalSection
GetOEMCP
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSection
SetUnhandledExceptionFilter
GetComputerNameW
EnumResourceNamesA
LocalAlloc
GetCurrentProcess
GlobalLock
GetStringTypeA
TlsGetValue
InterlockedDecrement
MulDiv
GlobalFree
InterlockedIncrement
LeaveCriticalSection
GlobalAlloc
GetCurrentThreadId
SetLastError
FormatMessageW
WaitForSingleObject
lstrlenW
CreateFileW
WideCharToMultiByte
Sections
.text Size: 140KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ