Static task
static1
Behavioral task
behavioral1
Sample
a8e1a75a1613a510beabf35c79a785c71ca151ae49ea46b58049500ac4050a1e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a8e1a75a1613a510beabf35c79a785c71ca151ae49ea46b58049500ac4050a1e.exe
Resource
win10v2004-20220812-en
General
-
Target
a8e1a75a1613a510beabf35c79a785c71ca151ae49ea46b58049500ac4050a1e
-
Size
461KB
-
MD5
2cdbff8662cf10228e0016af7be78be9
-
SHA1
2ef89e2fd03e8dbd3b974080fb752e21e711b9e2
-
SHA256
a8e1a75a1613a510beabf35c79a785c71ca151ae49ea46b58049500ac4050a1e
-
SHA512
0d7044d81b0d1a05a0ad3c3b2c33bb087489c48135f36a7f3826ba7dcc871443e17fd56add359691353d7d5995330b33a162baf925a9bf5075f79b15054e13d1
-
SSDEEP
12288:9VO7GJoxBttGQV+SzISsKO9wxuUGB2LU:9E6OPtZVxzISlO9/K
Malware Config
Signatures
Files
-
a8e1a75a1613a510beabf35c79a785c71ca151ae49ea46b58049500ac4050a1e.exe windows x86
a61fc350e6651d1760bed5a22398e877
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueW
ole32
OleUninitialize
comctl32
InitializeFlatSB
shell32
SHFileOperationW
comdlg32
GetSaveFileNameW
winspool.drv
OpenPrinterW
Sections
.text Size: 418KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE