Static task
static1
Behavioral task
behavioral1
Sample
0281a3df4c3626c144d04210e776a0f6078244e64eb0713c468bca08d09b7e5d.exe
Resource
win7-20220414-en
General
-
Target
0281a3df4c3626c144d04210e776a0f6078244e64eb0713c468bca08d09b7e5d
-
Size
3.8MB
-
MD5
2fae1bd2d77f021a0b327b5356c4d2c7
-
SHA1
cd0bb537e1aec361a8abe141795718ab2f37bf79
-
SHA256
0281a3df4c3626c144d04210e776a0f6078244e64eb0713c468bca08d09b7e5d
-
SHA512
0582506405d6fb6c6c94a0d6dbd2067dd7c3fd9f54a8a92ed1248b89fd216b28e2b3489fdfb7ce8dd5888eb021eefd9159864b5aa4cc5a5408847828eb123d6b
-
SSDEEP
49152:0ufc31xBmvvPeSV5/oe06hs8qxECY8YFxVKCgA9T03t/JS2AaB0pKgmoiy1:Vc7BmGI5/RC8qfYV9bgiT09xS2Hgsy1
Malware Config
Signatures
Files
-
0281a3df4c3626c144d04210e776a0f6078244e64eb0713c468bca08d09b7e5d.exe windows x86
38a7a81fb7a1b63fb17b662dd71c3913
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SignalObjectAndWait
user32
KillTimer
gdi32
SetROP2
advapi32
RegDeleteKeyW
shell32
DragFinish
msimg32
TransparentBlt
comctl32
InitCommonControlsEx
gdiplus
GdipAlloc
wininet
InternetCloseHandle
winhttp
WinHttpOpen
quartz
AMGetErrorTextW
oleacc
LresultFromObject
imm32
ImmGetOpenStatus
winmm
PlaySoundW
winspool.drv
DocumentPropertiesW
crypt32
CertDuplicateCertificateContext
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 2.8MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 773KB - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 191KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ