Static task
static1
Behavioral task
behavioral1
Sample
30a1e49d5f636deffb9b22d54f268144bb6baad845bce367543d092f47f988a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
30a1e49d5f636deffb9b22d54f268144bb6baad845bce367543d092f47f988a8.exe
Resource
win10v2004-20220812-en
General
-
Target
30a1e49d5f636deffb9b22d54f268144bb6baad845bce367543d092f47f988a8
-
Size
1.7MB
-
MD5
33e35c08a2159371249f83d04eec5dc1
-
SHA1
d4991603d082ad1c06dd2ae2f1327ae34806a59e
-
SHA256
30a1e49d5f636deffb9b22d54f268144bb6baad845bce367543d092f47f988a8
-
SHA512
fd38f864344002acc20f41a6f9919bbbae2a0cbf7c7db6ad974baaaab985fd0fbe5558ddb41ffe9720c6262510cc4d7a2f36c511404c0f019f9ec3bfe4b47a9c
-
SSDEEP
24576:WGdFUFTLa0q5ChPJKjk/aqf/A+2TL/nQVpmCM+cU/7Kc0SLb7wQHqZndK07OQaND:NPCK0q0A5qfeL/unTZ3hHodrODkKad
Malware Config
Signatures
Files
-
30a1e49d5f636deffb9b22d54f268144bb6baad845bce367543d092f47f988a8.exe windows x86
e5d57bcdcdf30ed821686d9724df887c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
MonitorFromWindow
gdi32
CopyMetaFileA
msimg32
TransparentBlt
winspool.drv
ClosePrinter
advapi32
RevertToSelf
shell32
SHGetKnownFolderPath
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameA
uxtheme
GetThemeColor
dwmapi
DwmIsCompositionEnabled
ole32
StgCreateDocfileOnILockBytes
oleaut32
SafeArrayDestroy
oledlg
ord8
gdiplus
GdipSetInterpolationMode
oleacc
AccessibleObjectFromWindow
imm32
ImmReleaseContext
winmm
PlaySoundA
Sections
.text Size: 1.6MB - Virtual size: 7.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 158KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE