Static task
static1
Behavioral task
behavioral1
Sample
b64a55b5ae7bef2c49684e9821c1dcf3977ecccde665c496669dd0cc44707f7f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b64a55b5ae7bef2c49684e9821c1dcf3977ecccde665c496669dd0cc44707f7f.exe
Resource
win10v2004-20220901-en
General
-
Target
b64a55b5ae7bef2c49684e9821c1dcf3977ecccde665c496669dd0cc44707f7f
-
Size
405KB
-
MD5
6ebd7e69080ce8fac08cb8f15df76bb0
-
SHA1
85017b214f49a7ef50489d12267a91eaa7efc2c5
-
SHA256
b64a55b5ae7bef2c49684e9821c1dcf3977ecccde665c496669dd0cc44707f7f
-
SHA512
df35b4cd5f56cd4bd30c91475ed38af9a78ecbc4f78da208e4e962d93b4d79757906bbf7e00f0678446e43a9ec39d8933d4279025ed764eae40f425d32f8caab
-
SSDEEP
6144:JTCifLMK/ADDRGZFxj0O2S7XN04KEZ/ASJXcwzbgWlyVcPOENjpWxFP:JrfLMK/s8fxIo7Xy4KAYToDlXPOENk
Malware Config
Signatures
Files
-
b64a55b5ae7bef2c49684e9821c1dcf3977ecccde665c496669dd0cc44707f7f.exe windows x86
dbcac3cf4ab0764048c90806dcf153ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
midiStreamOut
ws2_32
htons
user32
GetActiveWindow
gdi32
GetMapMode
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
StgCreateDocfileOnILockBytes
oleaut32
VariantChangeType
comctl32
ord17
oledlg
ord8
comdlg32
ChooseColorA
Sections
.text Size: 394KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE