Static task
static1
Behavioral task
behavioral1
Sample
a65c2aa00384bf4c719eb45f332dfc62ddcc53c8b8632ecfa59ca66f65d274ed.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a65c2aa00384bf4c719eb45f332dfc62ddcc53c8b8632ecfa59ca66f65d274ed.exe
Resource
win10v2004-20230220-en
General
-
Target
a65c2aa00384bf4c719eb45f332dfc62ddcc53c8b8632ecfa59ca66f65d274ed
-
Size
596KB
-
MD5
f99fd4b11ae1f29910414ce1feed8884
-
SHA1
04d326e002e1649f819d865e7c4e119b692af9df
-
SHA256
a65c2aa00384bf4c719eb45f332dfc62ddcc53c8b8632ecfa59ca66f65d274ed
-
SHA512
f734fa3625aad36ef1740edcf0215678830fa53569d81253a29cfcabbdacd75ed07c86c5aa08432f5c1668e723b1c4653fd7255a610c7bf3040180d4ca320423
-
SSDEEP
12288:s0jFg/xwMyAVYwuu14Zu16l+Q2CYHrhrVH45+w2KKGsHlVnj5:d4Pysv9h1NxXH/+4Vnd
Malware Config
Signatures
Files
-
a65c2aa00384bf4c719eb45f332dfc62ddcc53c8b8632ecfa59ca66f65d274ed.exe windows x86
0709a2df3858784922febc9243bc6b77
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
gdi32
UnrealizeObject
ole32
OleUninitialize
comctl32
ImageList_SetIconSize
shell32
Shell_NotifyIconA
comdlg32
GetSaveFileNameA
wsock32
WSACleanup
winmm
waveInUnprepareHeader
ntdll
RtlIpv6AddressToStringA
Sections
CODE Size: 564KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE