Static task
static1
Behavioral task
behavioral1
Sample
c7036f23157268f6390beb3e87031708902ed71e2ce175ada53528859beb68a6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c7036f23157268f6390beb3e87031708902ed71e2ce175ada53528859beb68a6.exe
Resource
win10v2004-20220812-en
General
-
Target
c7036f23157268f6390beb3e87031708902ed71e2ce175ada53528859beb68a6
-
Size
197KB
-
MD5
22bd739cadd1384e91edbc4c4d799e45
-
SHA1
33866af6a5c7aefc2d05b2b42ba556b6c6d7cc2e
-
SHA256
c7036f23157268f6390beb3e87031708902ed71e2ce175ada53528859beb68a6
-
SHA512
821e83363e284145d30cebe24350f70a2d64056097a9ca08b86a6fd3509c58a32d0f60cdaefcc2450948361e2fdf66983170f44f716fe4696fe61b4f6c78f258
-
SSDEEP
3072:ZaWV4thr9GBNkqfcJMNqDmp4LsFQ6qD7f+IvK6AWA4hE5u7uIQlZG6f3/ENr:ZaLto6yyLdPHvx6f5uFSa
Malware Config
Signatures
Files
-
c7036f23157268f6390beb3e87031708902ed71e2ce175ada53528859beb68a6.exe windows x86
a920c4fd0547e8ea13e8dc7d75bf11ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gdi32
GetRgnBox
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
shell32
SHAppBarMessage
comctl32
ord17
shlwapi
PathIsUNCA
oledlg
ord8
ole32
CoTaskMemAlloc
oleaut32
SysFreeString
Sections
.text Size: 159KB - Virtual size: 468KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE