Static task
static1
Behavioral task
behavioral1
Sample
e39d5b1b24775c9fbf225d6c98135047cb67581b64dabf5f62853bb2eb269879.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e39d5b1b24775c9fbf225d6c98135047cb67581b64dabf5f62853bb2eb269879.exe
Resource
win10v2004-20220901-en
General
-
Target
e39d5b1b24775c9fbf225d6c98135047cb67581b64dabf5f62853bb2eb269879
-
Size
637KB
-
MD5
6fd42fecc98095258f0d39c0a46a4341
-
SHA1
52858d39229c090895ffef128b8b507904f94187
-
SHA256
e39d5b1b24775c9fbf225d6c98135047cb67581b64dabf5f62853bb2eb269879
-
SHA512
577c39949c27440ad3a0a6fc004a4b51dde4a78f781e524573317cab81510ca7be87da86cb0209eacb65e8634148959611216e21a7486f298fda5273ddf9dee3
-
SSDEEP
12288:ht0Da+0D9neclDanhoKR7T2rlPNyp2MWCV3fCxWROdgVKUkg9:hnDJnioKRitNs2NClCxWLKUkS
Malware Config
Signatures
Files
-
e39d5b1b24775c9fbf225d6c98135047cb67581b64dabf5f62853bb2eb269879.exe windows x86
04e4ca59ba1fa46fd4817bb2f53c656b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
rasapi32
RasHangUpA
winmm
midiStreamRestart
ws2_32
send
user32
WaitForInputIdle
gdi32
Escape
msimg32
GradientFill
winspool.drv
OpenPrinterA
advapi32
RegSetValueExA
shell32
Shell_NotifyIconA
ole32
StgCreateDocfileOnILockBytes
oleaut32
SysAllocString
comctl32
_TrackMouseEvent
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
GetFileTitleA
Sections
.text Size: 606KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE