Static task
static1
Behavioral task
behavioral1
Sample
9246bcc1b9568bd70bbe43f63e7dbf9261f6728964567d4c8ffde1355577e931.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9246bcc1b9568bd70bbe43f63e7dbf9261f6728964567d4c8ffde1355577e931.exe
Resource
win10v2004-20220901-en
General
-
Target
9246bcc1b9568bd70bbe43f63e7dbf9261f6728964567d4c8ffde1355577e931
-
Size
2.1MB
-
MD5
b014291bfbccd3b3a1ae753bc8e51222
-
SHA1
85dcc4507ea4c7c4175138e7c998815ced5f8020
-
SHA256
9246bcc1b9568bd70bbe43f63e7dbf9261f6728964567d4c8ffde1355577e931
-
SHA512
b5d615765fa39e0a368c5330de10466e88beb497a0198adb207ebd7bc7170545a55e908a5da6d53bdc763e5fbb4dc5887ab0709f9a61e00ceab41bae28808d29
-
SSDEEP
49152:Vo9XrMYgs1kMEd7FDcayZ+dfLQOjmWs3HJxaWvnUtaoLl4S9:wl+d7F/yQZQu0JsXh
Malware Config
Signatures
Files
-
9246bcc1b9568bd70bbe43f63e7dbf9261f6728964567d4c8ffde1355577e931.exe windows x86
f66d10c6b7bd6bd01c0754b2ae59d639
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
IsEqualGUID
comctl32
InitializeFlatSB
imm32
ImmSetCompositionWindow
winspool.drv
OpenPrinterA
shell32
ShellExecuteA
wininet
HttpSendRequestExA
urlmon
URLDownloadToFileA
comdlg32
PageSetupDlgA
wsock32
WSACleanup
iphlpapi
GetAdaptersInfo
oledlg
OleUIObjectPropertiesA
Sections
CODE Size: 2.0MB - Virtual size: 8.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE