Static task
static1
Behavioral task
behavioral1
Sample
dfd4f01140a794c1426fabb557c426990d2bd51ef1f3c2577d5ff416fdfbb249.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dfd4f01140a794c1426fabb557c426990d2bd51ef1f3c2577d5ff416fdfbb249.exe
Resource
win10v2004-20220812-en
General
-
Target
dfd4f01140a794c1426fabb557c426990d2bd51ef1f3c2577d5ff416fdfbb249
-
Size
914KB
-
MD5
94d0e8604fab50e7207d8175927fded0
-
SHA1
3e62a8d657b126de0932885b0cc7c4d6f1190b77
-
SHA256
dfd4f01140a794c1426fabb557c426990d2bd51ef1f3c2577d5ff416fdfbb249
-
SHA512
85105634cf358f6daec6f324cf07fbe6c64e263c235d0fbb509249821a83f4ec017f7840f01b109026e2295887346ad4bfbab33b5660abc8edc5551c2b7cb867
-
SSDEEP
12288:B02wKYB9xZjs5ganVYoug+9hRm4o1kLWUACo/RfagGK3waf+CbxoLcnmnwGtYpjw:BEB9DVanb0JAsgZfpAaf+CdoLcitYuh
Malware Config
Signatures
Files
-
dfd4f01140a794c1426fabb557c426990d2bd51ef1f3c2577d5ff416fdfbb249.exe windows x86
d62be9cc229a8c19e23d26cac12c6c6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
rasapi32
RasHangUpA
winmm
midiStreamRestart
ws2_32
send
user32
UnregisterHotKey
gdi32
ExtSelectClipRgn
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
DragFinish
ole32
OleRun
oleaut32
SafeArrayAccessData
comctl32
ord17
wininet
InternetCloseHandle
comdlg32
ChooseColorA
Sections
.text Size: 897KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE