Static task
static1
Behavioral task
behavioral1
Sample
b7dc939c2684229fb1d5a7f5f8927320dee4d5d3ba5104ab12404b5952023086.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b7dc939c2684229fb1d5a7f5f8927320dee4d5d3ba5104ab12404b5952023086.exe
Resource
win10v2004-20221111-en
General
-
Target
b7dc939c2684229fb1d5a7f5f8927320dee4d5d3ba5104ab12404b5952023086
-
Size
167KB
-
MD5
bf2dcbe60dba33260b76895666f2e544
-
SHA1
49e95fa3291aa0ddb771754b2a2328cb8745ddc8
-
SHA256
b7dc939c2684229fb1d5a7f5f8927320dee4d5d3ba5104ab12404b5952023086
-
SHA512
05d3f62827151c42952acd0eedf14fa3618012e255856dd958a2306522291af4b17bb34c59e1c4058c891d9e596d82a4fdbf489a2543d57f5b520722bc10016f
-
SSDEEP
3072:S7bWdfghuQE0EXzhvIr9jaxRqNYLRiFZJfeX/BV8hbBVj5POj5P:SfWd5QPEVv89WiyBVEP5Pc5P
Malware Config
Signatures
Files
-
b7dc939c2684229fb1d5a7f5f8927320dee4d5d3ba5104ab12404b5952023086.exe windows x86
b29d9179ca8a45f909f9b498a358705a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
GetKeyboardType
msimg32
AlphaBlend
gdi32
SetTextColor
version
VerQueryValueW
wininet
InternetReadFile
comdlg32
GetSaveFileNameW
crypt32
CryptBinaryToStringW
ntdll
NtShutdownSystem
shell32
SHGetSpecialFolderPathW
ole32
CoCreateInstance
comctl32
InitCommonControls
Sections
.text Size: 156KB - Virtual size: 828KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ