Static task
static1
Behavioral task
behavioral1
Sample
f59f8c3c288dca60c79f32d3e779a816353ad2bd52c25c40dc485f40c3b20366.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f59f8c3c288dca60c79f32d3e779a816353ad2bd52c25c40dc485f40c3b20366.exe
Resource
win10v2004-20220812-en
General
-
Target
f59f8c3c288dca60c79f32d3e779a816353ad2bd52c25c40dc485f40c3b20366
-
Size
47KB
-
MD5
dd682e2ce3736a2f087de4c9f56f37f3
-
SHA1
c1507b0801d7f3423647906492e2dd61a7a9ae5b
-
SHA256
f59f8c3c288dca60c79f32d3e779a816353ad2bd52c25c40dc485f40c3b20366
-
SHA512
ca10c3e8d5d1aa3e561282fa114216e55ee532cd6848378a6b4cd7fdeea6b8cc41bcf31feae21f865bf261412d2818313467c21dffb9351c16afe65d13125c35
-
SSDEEP
768:1vvay8bCbX8TppTJB/hjbgPUVH1nPvYxFS+XTJd93OVdLNaAGnw2VTveLY6iOFEl:1Xa0UpJZXgPUVVPQrFXTJzOHcAwleLYF
Malware Config
Signatures
Files
-
f59f8c3c288dca60c79f32d3e779a816353ad2bd52c25c40dc485f40c3b20366.exe windows x86
864669228b9d0fcbd7920bc5eb3949d3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
wininet
InternetSetOptionA
Sections
.text Size: 41KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE