Static task
static1
Behavioral task
behavioral1
Sample
c96893caefaf6ebcf90fae2b850210b650b51d3e3f444cb752bc9b559bb4b99d.exe
Resource
win7-20220812-en
General
-
Target
c96893caefaf6ebcf90fae2b850210b650b51d3e3f444cb752bc9b559bb4b99d
-
Size
1.3MB
-
MD5
b37677d952006c9e3c4abb41bdacc10b
-
SHA1
62b843a175f64efd3a50173cfcec8d66317b4878
-
SHA256
c96893caefaf6ebcf90fae2b850210b650b51d3e3f444cb752bc9b559bb4b99d
-
SHA512
3f1dd01a6dec52e55f6704dce119ea956d816a8b7a7f4a6fb929fdae10cfb7ee53962873159a947d752e62cc3e63b72f93fbae92b7875caf81e7746b68ddde23
-
SSDEEP
12288:pdIu5bmgP4rrXI183fNyeZG+g13gwGHoy8+pJRsA56XIdBK9MdbvvNVRm6WjxM:pD5bwbIG1A+ceHoydXRqyYADvzRke
Malware Config
Signatures
Files
-
c96893caefaf6ebcf90fae2b850210b650b51d3e3f444cb752bc9b559bb4b99d.exe windows x86
9da8da33c085107018b65513011ff58a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
wsock32
WSACleanup
shell32
ShellExecuteExA
ole32
CoTaskMemFree
urlmon
URLDownloadToFileA
comctl32
_TrackMouseEvent
wininet
InternetOpenUrlA
winmm
waveInUnprepareHeader
rasapi32
RasGetEntryDialParamsA
netapi32
Netbios
ntdll
NtUnmapViewOfSection
NtQuerySystemInformation
avicap32
capGetDriverDescriptionA
shfolder
SHGetFolderPathA
gdiplus
GdipGetImageEncoders
ws2_32
WSAIoctl
msacm32
acmStreamUnprepareHeader
pstorec
PStoreCreateInstance
url
InetIsOffline
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE