Static task
static1
Behavioral task
behavioral1
Sample
db17459fed3417b0505e9b3342f1c47d30610ee02dc9df5f5ba9191a24e1be91.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
db17459fed3417b0505e9b3342f1c47d30610ee02dc9df5f5ba9191a24e1be91.exe
Resource
win10v2004-20221111-en
General
-
Target
db17459fed3417b0505e9b3342f1c47d30610ee02dc9df5f5ba9191a24e1be91
-
Size
403KB
-
MD5
d6c23026bf3af98f8d22f8c36d536aff
-
SHA1
1a1f94876486d6f603130d4b39d4933cf69fb972
-
SHA256
db17459fed3417b0505e9b3342f1c47d30610ee02dc9df5f5ba9191a24e1be91
-
SHA512
4b596083520ad4be761e27c3ace04ed10c396dec3c5a0c95e41576bf8f4c75135fd3bc736ac35241d63dca3232513b499a883c3fded04e352478d21542f729e4
-
SSDEEP
12288:fiEE9JB3uZHnmKGxlCcwZASeEC9NubNt8:aEE9P3OGBxlFwZniYZ2
Malware Config
Signatures
Files
-
db17459fed3417b0505e9b3342f1c47d30610ee02dc9df5f5ba9191a24e1be91.exe windows x86
7a75c9697843999930f46b17392dbf09
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoTaskMemFree
comctl32
ImageList_SetIconSize
shell32
Shell_NotifyIconA
Sections
CODE Size: 321KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE