Static task
static1
Behavioral task
behavioral1
Sample
563bf4d9888c24d6358a82448057cf3dd679e7a015dbc2b25665915220a25f37.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
563bf4d9888c24d6358a82448057cf3dd679e7a015dbc2b25665915220a25f37.exe
Resource
win10v2004-20221111-en
General
-
Target
563bf4d9888c24d6358a82448057cf3dd679e7a015dbc2b25665915220a25f37
-
Size
1.3MB
-
MD5
e7065833f13c0abac94e85df818e30d9
-
SHA1
25f7fa7d514c07d9f4ea5cb8c31912014a6afe63
-
SHA256
563bf4d9888c24d6358a82448057cf3dd679e7a015dbc2b25665915220a25f37
-
SHA512
8495287bc17336e6c08843d0a1d477e6e81d2589b6a2d14a96dd80c80b846e0c588e1e1d66bedeadb9ab791225e0800e79b2f13ee195cba5dde45360fe303682
-
SSDEEP
24576:K50iWgVn5yVEXL0HmVayNPRV5JKwEsyagyHgnsiJDK08hxg:KLwCfXNPRVTKwghyHJuDK08hG
Malware Config
Signatures
Files
-
563bf4d9888c24d6358a82448057cf3dd679e7a015dbc2b25665915220a25f37.exe windows x86
b5705842ab6f43085fcdb99e9c1f11cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
LBItemFromPt
shell32
Shell_NotifyIconA
comdlg32
ChooseColorA
winmm
waveOutWrite
wsock32
WSACleanup
ntdll
RtlIpv6AddressToStringA
iphlpapi
GetAdaptersInfo
Sections
CODE Size: 1.0MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 311KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE