Static task
static1
Behavioral task
behavioral1
Sample
bde12cee18088d39c557bcc02e073cc6f0be374b417952951833d7cdf008e9b7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bde12cee18088d39c557bcc02e073cc6f0be374b417952951833d7cdf008e9b7.exe
Resource
win10v2004-20220812-en
General
-
Target
bde12cee18088d39c557bcc02e073cc6f0be374b417952951833d7cdf008e9b7
-
Size
819KB
-
MD5
584a4ffcbf8d75ab212256355a741468
-
SHA1
df65c5fb03037f9849a06c01d6170f357d5ebdfb
-
SHA256
bde12cee18088d39c557bcc02e073cc6f0be374b417952951833d7cdf008e9b7
-
SHA512
d97ba3951a21e1399bc346a093701715537cfbf2e713261434bcfd9fb430bfb15b51930c86061f70792811f412bb43927748ada9d2a26e17a78dbe2a37cfb298
-
SSDEEP
6144:keENBLECdV3exuE2+YVzBe2/fGFsy1e1QviQB0ngS94qYyGBWiqDIW:ktdSuTrVBeJAI0nh+py3nD
Malware Config
Signatures
Files
-
bde12cee18088d39c557bcc02e073cc6f0be374b417952951833d7cdf008e9b7.exe windows x86
483185fb1d4b2722a6d0adb7d35a191b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetOpenEnumA
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
shell32
Shell_NotifyIconA
wininet
InternetReadFile
wsock32
WSACleanup
winmm
waveOutWrite
avicap32
capCreateCaptureWindowA
msacm32
acmFormatChooseA
ws2_32
WSAIoctl
Sections
CODE Size: 688KB - Virtual size: 688KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE