Static task
static1
Behavioral task
behavioral1
Sample
b75a0ff56d35969cfbda6c68c99457365e8f52e7c69f77bafebe9342dd4fd664.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b75a0ff56d35969cfbda6c68c99457365e8f52e7c69f77bafebe9342dd4fd664.exe
Resource
win10v2004-20230220-en
General
-
Target
b75a0ff56d35969cfbda6c68c99457365e8f52e7c69f77bafebe9342dd4fd664
-
Size
291KB
-
MD5
af9528200cdfd3c5962c848b9031b149
-
SHA1
6bf6117f8f3b1696891f223c86b90fb8553096f5
-
SHA256
b75a0ff56d35969cfbda6c68c99457365e8f52e7c69f77bafebe9342dd4fd664
-
SHA512
4eea9bbd656fcc802bdab3e9338f6458427502b8d359e766b8880c154be64ab618686753f086ec87cbd90d2f18eee30e20fdbc342758680c367bbe683816f12b
-
SSDEEP
6144:4vGZONwwkty8MYuTX2UwJSPANWI9bMZt1lJJfTFR+HdyRnSJoy:i0ON/QycvSPANVbIfTFR/D
Malware Config
Signatures
Files
-
b75a0ff56d35969cfbda6c68c99457365e8f52e7c69f77bafebe9342dd4fd664.exe windows x86
8dfa49e23d6e48a61231e81a5696abd2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegCloseKey
version
GetFileVersionInfoA
wsock32
WSACleanup
comctl32
ImageList_Add
comdlg32
GetOpenFileNameA
gdi32
BitBlt
shell32
ShellExecuteA
user32
ActivateKeyboardLayout
oleaut32
SafeArrayCreate
Sections
.text Size: 267KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE