?FinanceAssist@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
1ad08aa6144885e0c828c471e54b1c66d7926f42c127cb0fc982130790e2a8c7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1ad08aa6144885e0c828c471e54b1c66d7926f42c127cb0fc982130790e2a8c7.exe
Resource
win10v2004-20221111-en
General
-
Target
1ad08aa6144885e0c828c471e54b1c66d7926f42c127cb0fc982130790e2a8c7
-
Size
59KB
-
MD5
a58b8838b0d03b2f61707d1ef583153e
-
SHA1
f1fc90a01b010dc6d979ee97b76eaa5bc5556d3b
-
SHA256
1ad08aa6144885e0c828c471e54b1c66d7926f42c127cb0fc982130790e2a8c7
-
SHA512
22a2a874e8d635eb13cd11bf93eef53d3e130f99cc0ec5d52e6b6003769023f925773a4e2185c1c8189d16d1185d16b660698ef45c9defa06be30d67f9496490
-
SSDEEP
1536:7r9RDhESQYYQRPz4Cyb84BSdBtjlBC1ow40U9v:PnQgRPMCygyWBBlBGt/UZ
Malware Config
Signatures
Files
-
1ad08aa6144885e0c828c471e54b1c66d7926f42c127cb0fc982130790e2a8c7.exe windows x86
4b9e4549a28bcbae7ae04fdb677f6fc9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
UrlIsOpaqueA
kernel32
lstrcmpiW
lstrlenW
Exports
Exports
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t2 Size: 512B - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.t1 Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t4 Size: 512B - Virtual size: 394B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.t3 Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.t5 Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ