Static task
static1
Behavioral task
behavioral1
Sample
3ee9bc5bc1a1a2c36687fd23a7de783b0973331442746eed8ce2816d27f27a26.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3ee9bc5bc1a1a2c36687fd23a7de783b0973331442746eed8ce2816d27f27a26.exe
Resource
win10v2004-20220901-en
General
-
Target
3ee9bc5bc1a1a2c36687fd23a7de783b0973331442746eed8ce2816d27f27a26
-
Size
2.4MB
-
MD5
495ed89a781dc4a7073e7bf861883b9d
-
SHA1
dd55e22cc4620e7b61383654d7b640047a3a8fee
-
SHA256
3ee9bc5bc1a1a2c36687fd23a7de783b0973331442746eed8ce2816d27f27a26
-
SHA512
f1381595da204ceec4e09cbd268000712b549acf8921736fce9276beda37c3cc6980ce03aff12a105bdfc201c615fcc08e18a4f44ed9526288898c18d718c1ec
-
SSDEEP
49152:+MbcKzBjBhkcZDt0Oay9ypu7lxAnjDw8nSD3A1sxunXh63U+61u:+MbcKzNBXZ5DycDejj0A1N0361
Malware Config
Signatures
Files
-
3ee9bc5bc1a1a2c36687fd23a7de783b0973331442746eed8ce2816d27f27a26.exe windows x86
c5f134f1b8f0f90b68489005abb1a6e1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetGetConnectionA
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
IsEqualGUID
comctl32
ImageList_SetIconSize
winspool.drv
OpenPrinterA
shell32
Shell_NotifyIconA
wininet
InternetReadFile
comdlg32
PageSetupDlgA
pquery.bin
WyQueryPYWhole
lz32
LZOpenFileA
Sections
CODE Size: 2.4MB - Virtual size: 9.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE