Static task
static1
Behavioral task
behavioral1
Sample
199e4a78a6e4d1962a3755cfcae05d5443f19b9fd2005cd8f6de9e9ad2fdaf17.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
199e4a78a6e4d1962a3755cfcae05d5443f19b9fd2005cd8f6de9e9ad2fdaf17.exe
Resource
win10v2004-20220812-en
General
-
Target
199e4a78a6e4d1962a3755cfcae05d5443f19b9fd2005cd8f6de9e9ad2fdaf17
-
Size
1.3MB
-
MD5
fe4f8783d90de179a3be8b2bf5e07d5a
-
SHA1
494d34a0a91a7ad516cbf0ec8ff1f35c53534991
-
SHA256
199e4a78a6e4d1962a3755cfcae05d5443f19b9fd2005cd8f6de9e9ad2fdaf17
-
SHA512
83789f223d11ec39a84edcf107dfe06e25dda58486f4e28b7c96dd5b4bfc1d3bec3b0d1539cccab1b446334ee25877d6e97b1fa9e680bc6b56741ff10691a179
-
SSDEEP
24576:zZUExvciyQeMT1QB/B7nSdAA8lLExcllW28I9bFIZsuXhhCvU7:u0vcnQeY1QqZ8lIAWB8xIC2h4
Malware Config
Signatures
Files
-
199e4a78a6e4d1962a3755cfcae05d5443f19b9fd2005cd8f6de9e9ad2fdaf17.exe windows x86
62e97376f4e635c921e5fb5aaa2800ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
GetUserNameW
version
GetFileVersionInfoA
wsock32
WSAAsyncGetHostByName
winspool.drv
ClosePrinter
comctl32
FlatSB_GetScrollInfo
gdi32
AbortDoc
msimg32
AlphaBlend
shell32
SHGetFileInfoW
user32
ActivateKeyboardLayout
winmm
sndPlaySoundA
ole32
CLSIDFromProgID
oleaut32
GetActiveObject
gdiplus
GdiplusStartup
Sections
.text Size: 1.2MB - Virtual size: 45.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE