Static task
static1
Behavioral task
behavioral1
Sample
5ed90604881512debf2d9973ca425452ca1ac58babdf9e2892179bfe21bfad82.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5ed90604881512debf2d9973ca425452ca1ac58babdf9e2892179bfe21bfad82.exe
Resource
win10v2004-20220812-en
General
-
Target
5ed90604881512debf2d9973ca425452ca1ac58babdf9e2892179bfe21bfad82
-
Size
1.3MB
-
MD5
774ffe1cd0d58f969b5723b14c229b26
-
SHA1
99dee1f2731e1e5b560f830509c311ce32268ee2
-
SHA256
5ed90604881512debf2d9973ca425452ca1ac58babdf9e2892179bfe21bfad82
-
SHA512
bdbaa08014f671e290fb9d52f0f92f54daf242961634e35c506438f487db17a082368a4b19241de9ce46f872fbe26d921b6aaa42149a17c278ae9d0a4616dbf9
-
SSDEEP
24576:CKlorNTyXzhVQa7mEuM0Kcrea/f4fdCNYnbmeYX7hFO9CkAg01CaBgnsTrL:iZTyQaaDxKw/wQN4meYXWQkAhkK/
Malware Config
Signatures
Files
-
5ed90604881512debf2d9973ca425452ca1ac58babdf9e2892179bfe21bfad82.exe windows x86
469ef3cb5c39a239c0b5cb309d2ef7a4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
WidenPath
version
VerQueryValueA
ole32
CreateILockBytesOnHGlobal
comctl32
_TrackMouseEvent
imm32
ImmGetDescriptionA
urlmon
URLDownloadToFileA
wininet
HttpSendRequestExA
shell32
ShellExecuteA
winspool.drv
OpenPrinterA
winmm
timeSetEvent
wsock32
WSACleanup
msvcrt
_gcvt
libeay32
PEM_read_bio_PrivateKey
syunew3d
YReadString
mwrf32
rf_beep
Sections
.text Size: 1.3MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE