Static task
static1
Behavioral task
behavioral1
Sample
958053db8af8e6c66f5d310b21c44ed62790bbee3456af78c1c7e29fdbcd4223.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
958053db8af8e6c66f5d310b21c44ed62790bbee3456af78c1c7e29fdbcd4223.exe
Resource
win10v2004-20220812-en
General
-
Target
958053db8af8e6c66f5d310b21c44ed62790bbee3456af78c1c7e29fdbcd4223
-
Size
250KB
-
MD5
73bf9fc02b4c4e2daec9f872585cda3b
-
SHA1
734a879e4e1139919f5cc2feccb415d83a9c490c
-
SHA256
958053db8af8e6c66f5d310b21c44ed62790bbee3456af78c1c7e29fdbcd4223
-
SHA512
245b2862c5f0efc61404413713a0a963a7e8c34717a7339edb8c74509b075bbe0fc80854564846afaedc9b10b2c0b1ddc63edf6e5122e5f8e046b6cf11d7134e
-
SSDEEP
3072:u1TMJKRbnUPY0zIyUsm/i5fAiNsvvzJA2nhih0aUl4l4aAeHjw68YwaXqCksRp9S:tIRSbUsmKDNYvQFPhjU
Malware Config
Signatures
Files
-
958053db8af8e6c66f5d310b21c44ed62790bbee3456af78c1c7e29fdbcd4223.exe windows x86
cbd01cc777a16e52dda89ecb5dd31e4f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
FreeSid
avicap32
capCreateCaptureWindowA
gdi32
PatBlt
msacm32
acmStreamSize
netapi32
Netbios
oleaut32
SysFreeString
shell32
ShellExecuteA
user32
GetDC
winmm
waveInOpen
wsock32
send
Sections
.MPRESS1 Size: 108KB - Virtual size: 596KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE