Static task
static1
Behavioral task
behavioral1
Sample
ce6295617b4f14652678605da16f55acec49a321ed26d0ae3a0af72a8b73f52d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ce6295617b4f14652678605da16f55acec49a321ed26d0ae3a0af72a8b73f52d.exe
Resource
win10v2004-20221111-en
General
-
Target
ce6295617b4f14652678605da16f55acec49a321ed26d0ae3a0af72a8b73f52d
-
Size
197KB
-
MD5
cbe6d57435bcc20595847ed3a6714995
-
SHA1
96675471d3fcba9b98efd386fe0452bde53365bf
-
SHA256
ce6295617b4f14652678605da16f55acec49a321ed26d0ae3a0af72a8b73f52d
-
SHA512
fd4609165383a371cccaa01f89fcdc2e292306daca0796ff78fa04a2c86314af54521191f15c76edcf0c80de7a366e213785de0ba4133013e5353df6342a3025
-
SSDEEP
6144:Kxg+KSsJsbCvxRmv8SGKBtw30F5TvvJU:09KfJ+A8B/FtvvJ
Malware Config
Signatures
Files
-
ce6295617b4f14652678605da16f55acec49a321ed26d0ae3a0af72a8b73f52d.exe windows x86
a56c454d0c6e31a02c05e10f152af395
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
shell32
ShellExecuteExA
comctl32
ImageList_SetIconSize
wsock32
WSACleanup
netapi32
Netbios
Sections
CODE Size: 189KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE