Static task
static1
Behavioral task
behavioral1
Sample
eafd6756f71d5822cbf0dc855eb589ab7bb0cf71e5801800ab0ef6da4dd9dd03.exe
Resource
win7-20220812-en
General
-
Target
eafd6756f71d5822cbf0dc855eb589ab7bb0cf71e5801800ab0ef6da4dd9dd03
-
Size
1.6MB
-
MD5
ce039c243ccdde8cb2d739ae6ad4472a
-
SHA1
eb87409b6028aef2f96e54766fb45704479ff965
-
SHA256
eafd6756f71d5822cbf0dc855eb589ab7bb0cf71e5801800ab0ef6da4dd9dd03
-
SHA512
366bfa386327923d2a9c19ae9770cef9017c0f09775757b123f9a8a539d6eb20bd792fe9dc9dd92d6a13a338839a8b6ac843f1e46bbb7cbb309fe07869f0e064
-
SSDEEP
24576:X/hSUFG/LHDPMYgIIRAetv0o79/55ZDtjNWvrSEfFYWLGJxcs94ivqQ7gJoyh:XJFKHDPgmYvJX+jnxLGJxb2ivqQiT
Malware Config
Signatures
Files
-
eafd6756f71d5822cbf0dc855eb589ab7bb0cf71e5801800ab0ef6da4dd9dd03.exe windows x86
bcfc3ebcd90bd4631d65757853beb3bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetActiveWindow
gdi32
SelectPalette
winspool.drv
DocumentPropertiesW
comdlg32
GetSaveFileNameW
advapi32
RegisterEventSourceA
shell32
ExtractIconW
ole32
CoInitialize
oleaut32
VariantChangeType
oleacc
CreateStdAccessibleObject
comctl32
ImageList_GetIconSize
wsock32
gethostname
ws2_32
WSAEventSelect
Sections
.text Size: 1.5MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE