Static task
static1
Behavioral task
behavioral1
Sample
80a50dfe4bbab1998961f1232b2c34262fcceaa4456c8fcd3b78cf302b060fe2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
80a50dfe4bbab1998961f1232b2c34262fcceaa4456c8fcd3b78cf302b060fe2.exe
Resource
win10v2004-20220812-en
General
-
Target
80a50dfe4bbab1998961f1232b2c34262fcceaa4456c8fcd3b78cf302b060fe2
-
Size
2.4MB
-
MD5
ae498ff7648c7d1dbf46cad55de035e1
-
SHA1
311575c955e32b5697838a8d2e6f1b9c2260863a
-
SHA256
80a50dfe4bbab1998961f1232b2c34262fcceaa4456c8fcd3b78cf302b060fe2
-
SHA512
9539516a62608a1575e2f97f16052c31a8fedf6604fdfeffb02a940c43d896ef0d8a3f563cca469cb0466cea7e77cf3b56d9b92f2d08104c6e69ccfd81c5d43a
-
SSDEEP
49152:hpYeyL741eNTEAfHUtf6TnZCkyaPeBC13dyPhlU5BGyias:hpfreNTEKIkDol0Gyw
Malware Config
Signatures
Files
-
80a50dfe4bbab1998961f1232b2c34262fcceaa4456c8fcd3b78cf302b060fe2.exe windows x86
c5f134f1b8f0f90b68489005abb1a6e1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetGetConnectionA
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
IsEqualGUID
comctl32
ImageList_SetIconSize
winspool.drv
OpenPrinterA
shell32
Shell_NotifyIconA
wininet
InternetReadFile
comdlg32
PageSetupDlgA
pquery.bin
WyQueryPYWhole
lz32
LZOpenFileA
Sections
CODE Size: 2.4MB - Virtual size: 9.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE