Static task
static1
Behavioral task
behavioral1
Sample
71e2cac8fdc5cbef7b1fe9e5474aa13663e13f57b8c04f612873f52c471ce79c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
71e2cac8fdc5cbef7b1fe9e5474aa13663e13f57b8c04f612873f52c471ce79c.exe
Resource
win10v2004-20220812-en
General
-
Target
71e2cac8fdc5cbef7b1fe9e5474aa13663e13f57b8c04f612873f52c471ce79c
-
Size
1.8MB
-
MD5
be56c73121a0d8b06ef59569bf9fe446
-
SHA1
d365fb870295d8498ff1975d094c906e409ea596
-
SHA256
71e2cac8fdc5cbef7b1fe9e5474aa13663e13f57b8c04f612873f52c471ce79c
-
SHA512
2c0fdd0960897faf8540301f6807f129a7ad84d8a30c422b58eb9ec5e1877899447a6cd822787627b821582b176d84880c05793b733e20fd2cd4c77c54074deb
-
SSDEEP
49152:uxnmpxsZKa7sqiPAiGmULPc4HAExFwauhpbrZBDE/JxW:amDK3w360ynFwaEBrZBDE/
Malware Config
Signatures
Files
-
71e2cac8fdc5cbef7b1fe9e5474aa13663e13f57b8c04f612873f52c471ce79c.exe windows x86
806e9ec88b558d1b7a7a7f7733872b3b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
wininet
InternetReadFile
user32
DrawFrameControl
gdi32
GetViewportOrgEx
msimg32
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
advapi32
DecryptFileW
shell32
SHGetDesktopFolder
comctl32
_TrackMouseEvent
shlwapi
PathFileExistsW
ole32
OleDuplicateData
oleaut32
SystemTimeToVariantTime
ws2_32
inet_addr
setupapi
CM_Get_Parent
winmm
PlaySoundW
version
VerQueryValueW
dbghelp
MiniDumpWriteDump
netapi32
NetWkstaGetInfo
wintrust
CryptCATAdminAcquireContext
crypt32
CryptMsgClose
oleacc
AccessibleObjectFromWindow
imm32
ImmGetOpenStatus
Sections
.text Size: 1.6MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE