Static task
static1
Behavioral task
behavioral1
Sample
e66c010fdd65b98e42bac9dbf472cb8e384968842d77316498fd195198db130f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e66c010fdd65b98e42bac9dbf472cb8e384968842d77316498fd195198db130f.exe
Resource
win10v2004-20220901-en
General
-
Target
e66c010fdd65b98e42bac9dbf472cb8e384968842d77316498fd195198db130f
-
Size
1.1MB
-
MD5
07088b1bb07ce0a9c71f64039abccb6f
-
SHA1
a8979274145dba515e140e35e09742b79544cd3c
-
SHA256
e66c010fdd65b98e42bac9dbf472cb8e384968842d77316498fd195198db130f
-
SHA512
5b64be9f821c542581d041d6672d66cbdcfe0eb040034d11525ea66a453344d0708be0b2cd01b28e77d59054491750ca95f96a4f3614c1c05ea6af7b3226b520
-
SSDEEP
24576:PlrgzhiiioLuHLerQvX5gzp5WyNcpoPuxVkekwHtTPQ8bok+X:PlEV1iSureXHWyNjPMGAtrQ8boH
Malware Config
Signatures
Files
-
e66c010fdd65b98e42bac9dbf472cb8e384968842d77316498fd195198db130f.exe windows x86
fe9409cde0186ace3eef69655ba3370f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegQueryValueExA
avifil32
AVISaveOptionsFree
comctl32
ImageList_SetIconSize
comdlg32
PrintDlgA
gdi32
UnrealizeObject
imm32
ImmGetVirtualKey
msvfw32
DrawDibRealize
ole32
CreateStreamOnHGlobal
oleaut32
SafeArrayPtrOfIndex
shell32
SHGetSpecialFolderLocation
user32
mouse_event
version
VerQueryValueA
winmm
waveOutGetNumDevs
winspool.drv
OpenPrinterA
Sections
CODE Size: 1.1MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE