Static task
static1
Behavioral task
behavioral1
Sample
1594594f73375ad3430d90082242fad48fef1936530d95445b4a2f9588d502ee.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1594594f73375ad3430d90082242fad48fef1936530d95445b4a2f9588d502ee.exe
Resource
win10v2004-20220812-en
General
-
Target
1594594f73375ad3430d90082242fad48fef1936530d95445b4a2f9588d502ee
-
Size
1.7MB
-
MD5
3909bde134fb35c83d274fbda84d86bb
-
SHA1
508cee83f5ffd03c4b079c005b36e77b934c56a5
-
SHA256
1594594f73375ad3430d90082242fad48fef1936530d95445b4a2f9588d502ee
-
SHA512
df75121beca1d89f11dbb7ee3940d4e0a06711793fa762c1bca59fd468cdbbbc224562058db33f5d848aec13c1ec9019c9eed23b47c6bba9f517aab1abf537f4
-
SSDEEP
24576:Wtzptg2PfGq0xNeRfoXXilbtejH+1Clpar/5u2i0bFu05QfjvtSsnd48dTVf1IgE:g3gkSeGXilbteCwgFuXR3nbdTrI1
Malware Config
Signatures
Files
-
1594594f73375ad3430d90082242fad48fef1936530d95445b4a2f9588d502ee.exe windows x86
2e2766ca2c5dec49611387553225cc94
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Module32First
lstrcpynA
user32
wsprintfA
InflateRect
advapi32
OpenServiceA
RegQueryValueA
gdi32
SetViewportExtEx
GetStockObject
winspool.drv
OpenPrinterA
DocumentPropertiesA
comctl32
ord17
ord17
shlwapi
PathFileExistsA
winmm
midiStreamRestart
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
ws2_32
inet_ntoa
comdlg32
GetFileTitleA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 610KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ