Static task
static1
Behavioral task
behavioral1
Sample
72c598481e8589be64d26ad77ae39ac6d4a0ef739acad212b4454b623737025a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
72c598481e8589be64d26ad77ae39ac6d4a0ef739acad212b4454b623737025a.exe
Resource
win10v2004-20220812-en
General
-
Target
72c598481e8589be64d26ad77ae39ac6d4a0ef739acad212b4454b623737025a
-
Size
630KB
-
MD5
67018f9238969d8d0be752c56b76b8a0
-
SHA1
2e4d6260f2cf3fe6ffa3fdcb8e8b33b843cf4073
-
SHA256
72c598481e8589be64d26ad77ae39ac6d4a0ef739acad212b4454b623737025a
-
SHA512
fb3c20d91f725eb2937387eb8a741460e57e5073390f5147487ef91979943cec5527867748bf55932a85e000ebdaef4ac395bf4b0a40ae8949abdf7cd279308e
-
SSDEEP
12288:Jc4EA/DxylZRX5Ema/IIdGasIgyU7LIzyahfaYdCOf0FJyYGltd1kI:AZRemx6GQgWyahVYY+I
Malware Config
Signatures
Files
-
72c598481e8589be64d26ad77ae39ac6d4a0ef739acad212b4454b623737025a.exe windows x86
57ad4a2a973c91ca0760eef928e6edd7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueA
ole32
OleUninitialize
comctl32
InitializeFlatSB
shell32
ShellExecuteExA
comdlg32
PrintDlgW
wsock32
WSACleanup
winspool.drv
OpenPrinterW
msgmgr
PostBroadcastMessage
usermgr
User_GetUserInfo
userdiskapi
UserDiskDisConnect
Sections
.text Size: 591KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�@���u Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE