Static task
static1
Behavioral task
behavioral1
Sample
c90f2ad156b6bb5d678d8a869108dbce6d425bdd71b4038e7bd237ade6c20894.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c90f2ad156b6bb5d678d8a869108dbce6d425bdd71b4038e7bd237ade6c20894.exe
Resource
win10v2004-20220812-en
General
-
Target
c90f2ad156b6bb5d678d8a869108dbce6d425bdd71b4038e7bd237ade6c20894
-
Size
1009KB
-
MD5
0ee7dabf29d3841159b5739ddd83c061
-
SHA1
458e1fa8d85302a43896460119217a96aa3e3e59
-
SHA256
c90f2ad156b6bb5d678d8a869108dbce6d425bdd71b4038e7bd237ade6c20894
-
SHA512
4c681753d06861db58c84723cb7c6a77c6533653282207f48812babf610a77615f8187989298aba763c921decdf784d8c8d469e5b028d80a9082b9a9e2c490a5
-
SSDEEP
24576:AlcVLkQRDKo3p25BTSPeB6dhTg/9BGr5WgkonX:AlqtKo39PeB6Dg7Vgk6
Malware Config
Signatures
Files
-
c90f2ad156b6bb5d678d8a869108dbce6d425bdd71b4038e7bd237ade6c20894.exe windows x86
522c1ea9bc4f0409a99b916ba3991258
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegCloseKey
user32
GetCursorPos
gdi32
SelectObject
shell32
SHGetSpecialFolderLocation
ole32
CoRegisterMessageFilter
ws2_32
WSCEnumProtocols
wininet
InternetCloseHandle
msimg32
GradientFill
comctl32
ImageList_ReplaceIcon
shlwapi
SHDeleteEmptyKeyW
oleaut32
VariantChangeType
wsock32
WSAGetLastError
iphlpapi
IpRenewAddress
winspool.drv
ClosePrinter
Sections
.text Size: 970KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE