Static task
static1
Behavioral task
behavioral1
Sample
297381eff5357e5fe71c23ebeaba4fe70ee2a7eab81aa7cdebc1c8c97a9d7f78.exe
Resource
win7-20220812-en
General
-
Target
297381eff5357e5fe71c23ebeaba4fe70ee2a7eab81aa7cdebc1c8c97a9d7f78
-
Size
254KB
-
MD5
0319e814ade36d115af8a135c86bb810
-
SHA1
f6f90756b82ddcf11ed199489f70403aedb69898
-
SHA256
297381eff5357e5fe71c23ebeaba4fe70ee2a7eab81aa7cdebc1c8c97a9d7f78
-
SHA512
c56392b255a87a9caf8c82ad7da037c55d36cdaea2999842940aa16fdf773686d916f7275adf7796b867de568b2c01f60953a3a2aeff2c5f296182d8b154b87c
-
SSDEEP
3072:XaWV4thr9GBNkqfcJMNqDmp4LsFQ6qD7f+IvK6AWA4hE5u7uIQlZG6f3/ENr1mvH:XaLto6yyLdPHvx6f5uFSa1mOxnNwXoN
Malware Config
Signatures
Files
-
297381eff5357e5fe71c23ebeaba4fe70ee2a7eab81aa7cdebc1c8c97a9d7f78.exe windows x86
a920c4fd0547e8ea13e8dc7d75bf11ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gdi32
GetRgnBox
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
shell32
SHAppBarMessage
comctl32
ord17
shlwapi
PathIsUNCA
oledlg
ord8
ole32
CoTaskMemAlloc
oleaut32
SysFreeString
Sections
.text Size: 159KB - Virtual size: 468KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE