Static task
static1
Behavioral task
behavioral1
Sample
4661eda9b7a0cd5ee73b687970243cfa11004844830f02ed5fa28056cdbf9428.exe
Resource
win7-20220901-en
General
-
Target
4661eda9b7a0cd5ee73b687970243cfa11004844830f02ed5fa28056cdbf9428
-
Size
325KB
-
MD5
0821e507b4b4b674f03c59449a456400
-
SHA1
e5702a2f90dc51bfc3348e0e54c4d3cca2e517fe
-
SHA256
4661eda9b7a0cd5ee73b687970243cfa11004844830f02ed5fa28056cdbf9428
-
SHA512
1268ccebbe2260c28a00df5e642f76e0161d067b6abed2a83351d1e2de69bb0d25b7f5b12e596061f5bd52c2da2d6cde8f9ffd279778416d8a9b43f3fc230a80
-
SSDEEP
6144:qvVcRLycDYWDX2r0GtX2SblhJ2RiegM827XHjfKosVS1EydZ8G3:qvVcRLyQYWDw0GZ2Qlj2RVgX2zHjOEak
Malware Config
Signatures
Files
-
4661eda9b7a0cd5ee73b687970243cfa11004844830f02ed5fa28056cdbf9428.exe windows x86
4d4238254354e35d40cf0ec441d960c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
powrprof
SetActivePwrScheme
pdh
PdhGetFormattedCounterValue
psapi
GetModuleFileNameExA
version
GetFileVersionInfoSizeA
user32
PostQuitMessage
gdi32
GetViewportExtEx
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
comctl32
ImageList_GetIconSize
oledlg
ord8
ole32
CoFreeUnusedLibraries
olepro32
ord253
oleaut32
VarDateFromStr
Sections
.text Size: 246KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE