Static task
static1
Behavioral task
behavioral1
Sample
4dfaa69a5bfe973360ea43f6d5aebab72ffd289bbb0bb68c10ee0754a89e0e33.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4dfaa69a5bfe973360ea43f6d5aebab72ffd289bbb0bb68c10ee0754a89e0e33.exe
Resource
win10v2004-20220901-en
General
-
Target
4dfaa69a5bfe973360ea43f6d5aebab72ffd289bbb0bb68c10ee0754a89e0e33
-
Size
177KB
-
MD5
7c4b7e75eb7fd38584e34a1eb8d4ac86
-
SHA1
e1578d7d31a77367f4011a7f1aef53d5a6c21b72
-
SHA256
4dfaa69a5bfe973360ea43f6d5aebab72ffd289bbb0bb68c10ee0754a89e0e33
-
SHA512
816af3eb010d8fbaec27dd23d29cac12c03da4cecf105a172681633ea82a4e128b47366ab7bb1df7be6883b58cd02aea00bee49dad2ac8be8251068b676e033d
-
SSDEEP
3072:38Z/G4MhpabhLlDvhC5j6O7M0leLzt6aulE6DMyfIp1N/mbtZnyhIF+JZ:38Z/G4MhovhC5mO7flEzhAvMygp1lmH
Malware Config
Signatures
Files
-
4dfaa69a5bfe973360ea43f6d5aebab72ffd289bbb0bb68c10ee0754a89e0e33.exe windows x86
2bca9d28cbf40dd6c6b8d638a1c60076
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
winspool.drv
ClosePrinter
kernel32
GetVersionExW
lstrcpyA
RemoveDirectoryW
lstrcmpiW
LoadLibraryA
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
shell32
ord201
ShellExecuteA
advapi32
RegQueryValueExW
RegOpenKeyExW
ElfOpenBackupEventLogA
RegSetValueExW
RegCreateKeyExW
RegCloseKey
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ