Static task
static1
Behavioral task
behavioral1
Sample
b232576476ab8b7525e1a3e77722569264189c7698bb81997ad09c2664d9b706.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b232576476ab8b7525e1a3e77722569264189c7698bb81997ad09c2664d9b706.exe
Resource
win10v2004-20230220-en
General
-
Target
b232576476ab8b7525e1a3e77722569264189c7698bb81997ad09c2664d9b706
-
Size
1.3MB
-
MD5
0eb6192f5cf7ec8074ab77f2864aa426
-
SHA1
2e93c23edf7e91c8099f45320dd9e0a777c4236b
-
SHA256
b232576476ab8b7525e1a3e77722569264189c7698bb81997ad09c2664d9b706
-
SHA512
2d79a745a4c0299f7bf13ec355ac60e18059ed60c02989b51fbf1de1fbe6b10bcfb86ae6bfb9bc589674e7d37b3c7f39d33f9706c7640a4dc43b3859b7414a0d
-
SSDEEP
24576:BvUzDsWCla6N0+W/5p3R2EeajB29RcLFP71eCsj3RMOWLtHILK08hxE:JU1ClaK0+W/5p8EeePUCcshHILK08he
Malware Config
Signatures
Files
-
b232576476ab8b7525e1a3e77722569264189c7698bb81997ad09c2664d9b706.exe windows x86
b5705842ab6f43085fcdb99e9c1f11cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
LBItemFromPt
shell32
Shell_NotifyIconA
comdlg32
ChooseColorA
winmm
waveOutWrite
wsock32
WSACleanup
ntdll
RtlIpv6AddressToStringA
iphlpapi
GetAdaptersInfo
Sections
CODE Size: 1.0MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE