Static task
static1
Behavioral task
behavioral1
Sample
4957bd89194a0bde41fa6f7258789523931c9ef904d2f390f772fca27a1607be.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4957bd89194a0bde41fa6f7258789523931c9ef904d2f390f772fca27a1607be.exe
Resource
win10v2004-20220812-en
General
-
Target
4957bd89194a0bde41fa6f7258789523931c9ef904d2f390f772fca27a1607be
-
Size
268KB
-
MD5
345336ed2b9b0d4a81857551eaa8585f
-
SHA1
45ddd1c5d91820ae213de30b0ecbff0701c56b56
-
SHA256
4957bd89194a0bde41fa6f7258789523931c9ef904d2f390f772fca27a1607be
-
SHA512
9544c9dddb9b8b848793de4906a6a468c61efb280572712cd08d8e5c3a3c45d41058de8ad08849c3865ccf379bdb2f6440c1feb46191e882582185c8ef8b4f6e
-
SSDEEP
6144:gy5OYTiuWkkCKCLQZt5TyTo6CnwcEFkpl6Ai9na0ggg:WYY5PtGTe6T9n
Malware Config
Signatures
Files
-
4957bd89194a0bde41fa6f7258789523931c9ef904d2f390f772fca27a1607be.exe windows x86
1cbb0956bb3493568e6ff32408eeac2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
dhplay
ord37
user32
GetClassInfoExW
gdi32
CreateSolidBrush
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
advapi32
RegQueryValueW
shell32
SHGetPathFromIDListW
comctl32
ImageList_GetIconSize
shlwapi
PathIsUNCW
oledlg
OleUIBusyW
ole32
CoRegisterMessageFilter
oleaut32
SysAllocString
Sections
.text Size: 239KB - Virtual size: 688KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE