Static task
static1
Behavioral task
behavioral1
Sample
e53d22fab876b67bacafaa4d730dc58d2776d6b8ce393ed87012b32463f0f56a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e53d22fab876b67bacafaa4d730dc58d2776d6b8ce393ed87012b32463f0f56a.exe
Resource
win10v2004-20220812-en
General
-
Target
e53d22fab876b67bacafaa4d730dc58d2776d6b8ce393ed87012b32463f0f56a
-
Size
17KB
-
MD5
2327e62b4ac238fab32f60c65e645930
-
SHA1
ac35a357f600a5dbb9cbe84a158e88ce259c5818
-
SHA256
e53d22fab876b67bacafaa4d730dc58d2776d6b8ce393ed87012b32463f0f56a
-
SHA512
a2c3f8b2f0c5f70e9afa8687b78b459eeeb5d3368cedadae49cd1a38048a005f845b077692917fd2794547c640c944a567e9b017df8e2175eac1a08bfeaadcab
-
SSDEEP
384:80+3vpKKWSwrWMALLf9ZksktkEgzV6No8qYOU5KyoOBDc:WBK7SLLTkUQP5HjBDc
Malware Config
Signatures
Files
-
e53d22fab876b67bacafaa4d730dc58d2776d6b8ce393ed87012b32463f0f56a.exe windows x86
c6252fccf829b9d03821f28adaf32c75
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_except_handler3
_initterm
__getmainargs
__initenv
exit
_write
_cexit
_XcptFilter
__setusermatherr
_exit
_c_exit
advapi32
RegSetValueExA
RegQueryValueExA
RegCreateKeyA
GetUserNameA
RegCloseKey
kernel32
GetTickCount
FormatMessageA
LocalFree
GetComputerNameA
GetFileSize
_lclose
GetModuleHandleA
OpenFile
_lread
lprhelp
WriteJobData
StartJob
InitiateConnection
CloseLPR
CancelJob
OpenLPR
EndJob
user32
CharToOemBuffA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.TOT Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE