Static task
static1
Behavioral task
behavioral1
Sample
f9fc20670c1b5a55d22b1cddf0de0ff617000277701866f858c2d3dbdd808398.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f9fc20670c1b5a55d22b1cddf0de0ff617000277701866f858c2d3dbdd808398.exe
Resource
win10v2004-20220812-en
General
-
Target
f9fc20670c1b5a55d22b1cddf0de0ff617000277701866f858c2d3dbdd808398
-
Size
4.2MB
-
MD5
8e8c05697e48f8edc6a46a58abf0a153
-
SHA1
2fbcb13864ebe40dbbf5c528206c0c8b29f51822
-
SHA256
f9fc20670c1b5a55d22b1cddf0de0ff617000277701866f858c2d3dbdd808398
-
SHA512
cc7f5e788b30fc7ec1b92191e39e927f98c878f7788d05af97d2ffa1ab3db456269d75e7cb938cc6ed2dda25a6ef7bae5d1446b8f1ba01c6e3fd4edf9bc2fcb8
-
SSDEEP
98304:Q00WP7xz6oUZ0L9JR79Zsbo88w/JD6jQKhh55ZlTWC:QyxOoU+7948mJD68KhhZ
Malware Config
Signatures
Files
-
f9fc20670c1b5a55d22b1cddf0de0ff617000277701866f858c2d3dbdd808398.exe windows x86
e813c0d97b234c5ff0d2655a6651c575
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetGetConnectionA
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
IsEqualGUID
comctl32
InitializeFlatSB
imm32
ImmSetCompositionWindow
winspool.drv
OpenPrinterA
shell32
Shell_NotifyIconA
wininet
HttpSendRequestExA
urlmon
URLDownloadToFileA
comdlg32
PageSetupDlgA
wsock32
WSACleanup
iphlpapi
GetAdaptersInfo
oledlg
OleUIObjectPropertiesA
avicap32
capCreateCaptureWindowA
winmm
sndPlaySoundA
Sections
CODE Size: 4.1MB - Virtual size: 31.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE