Static task
static1
Behavioral task
behavioral1
Sample
190a05b0c8317186337261b9476492bef517103940b6de14eb4ec00ca2dfa9e4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
190a05b0c8317186337261b9476492bef517103940b6de14eb4ec00ca2dfa9e4.exe
Resource
win10v2004-20220812-en
General
-
Target
190a05b0c8317186337261b9476492bef517103940b6de14eb4ec00ca2dfa9e4
-
Size
5.4MB
-
MD5
d5d0d8341d11454e41f28d3984aaca00
-
SHA1
d2a04d32a9ac7d895eb9ff981fa8dd6a18603b76
-
SHA256
190a05b0c8317186337261b9476492bef517103940b6de14eb4ec00ca2dfa9e4
-
SHA512
775cf0abeefa0213a0e2e01407376c8032796c74c6acb62c37dfdc3de62823be2fc2895d69b7a62de85d2f92e4dabe352ca6b4b6627eec8de34613e334b82c3c
-
SSDEEP
98304:3Ncq/meOddUTBzL1DcysY38614GDM4HsQCa6ddhftF+THf4Dsa0LeASQZ7TUm1k1:3Ncq2LUTxL1IyfMA4GlHs48Vo4DsoGPc
Malware Config
Signatures
Files
-
190a05b0c8317186337261b9476492bef517103940b6de14eb4ec00ca2dfa9e4.exe windows x86
a04944d2f7d7bd9daf5f245d9c7e3d0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
user32
wsprintfA
gdi32
GetDIBits
gdiplus
GdiplusStartup
ole32
CoInitialize
shell32
DragFinish
imm32
ImmAssociateContext
shlwapi
PathFileExistsA
winmm
timeBeginPeriod
advapi32
ControlService
ws2_32
socket
version
GetFileVersionInfoSizeA
wininet
InternetReadFile
winhttp
WinHttpSetCredentials
dbghelp
MakeSureDirectoryPathExists
oleaut32
VariantTimeToSystemTime
psapi
GetModuleFileNameExA
comctl32
ImageList_GetIconSize
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
Sections
.text Size: 4.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 928KB - Virtual size: 928KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ