Static task
static1
Behavioral task
behavioral1
Sample
2a40e9ce37230ac1ebfbdcd52ed98f62422e36b78925b88cf626b5c9aa6440dd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2a40e9ce37230ac1ebfbdcd52ed98f62422e36b78925b88cf626b5c9aa6440dd.exe
Resource
win10v2004-20220812-en
General
-
Target
2a40e9ce37230ac1ebfbdcd52ed98f62422e36b78925b88cf626b5c9aa6440dd
-
Size
1.4MB
-
MD5
55805707bdb66fe3c7bb84bc516335ce
-
SHA1
3045fd1dde1befc196157f8ba18be24cbdd93ac7
-
SHA256
2a40e9ce37230ac1ebfbdcd52ed98f62422e36b78925b88cf626b5c9aa6440dd
-
SHA512
7706df16b68d4cd7ba537442079eab4dbbe6ec47dbef3753097d9a3dd7b3a7a0dc4efca2975fb59b2887dedfb70e8df5822d0245b6321102ffef8a3e42ddec62
-
SSDEEP
24576:t/dFYplp9PLHo92N1XB/Ekq3ri24ofDCEkYHGhPq6x5jqe0:tdFY99PLHoUx8k4T4yeBx9qj
Malware Config
Signatures
Files
-
2a40e9ce37230ac1ebfbdcd52ed98f62422e36b78925b88cf626b5c9aa6440dd.exe windows x86
fae6fe5ea8a4ccde1035e1cc0cd1d636
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
wininet
InternetWriteFile
user32
ToUnicodeEx
gdi32
GetLayout
msimg32
TransparentBlt
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
advapi32
ChangeServiceConfigW
shell32
DragFinish
comctl32
_TrackMouseEvent
shlwapi
PathFileExistsW
ole32
CoTaskMemFree
oleaut32
VarBstrFromDate
ws2_32
inet_addr
setupapi
CM_Get_Parent
winmm
PlaySoundW
version
GetFileVersionInfoW
oleacc
CreateStdAccessibleObject
imm32
ImmReleaseContext
Sections
.text Size: 1.2MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE