Static task
static1
Behavioral task
behavioral1
Sample
304440b8b12b40d1a5aee0c89c34ba6a9bc0be6b5e57a2fea0dd3fcd2e59fc6c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
304440b8b12b40d1a5aee0c89c34ba6a9bc0be6b5e57a2fea0dd3fcd2e59fc6c.exe
Resource
win10v2004-20220901-en
General
-
Target
304440b8b12b40d1a5aee0c89c34ba6a9bc0be6b5e57a2fea0dd3fcd2e59fc6c
-
Size
1.8MB
-
MD5
171b5e27d3a632a4fd2a0cae6a22bb40
-
SHA1
f1f0f10cc356ad257491cd8760d82da4ded45e1e
-
SHA256
304440b8b12b40d1a5aee0c89c34ba6a9bc0be6b5e57a2fea0dd3fcd2e59fc6c
-
SHA512
12f0e7cf9ce1b5e2c647a3e4a7a8b9d35e385080430f186fe8fd4ae93c9b1d89d441ef47a20f4cd3259f391f8ae293289311854b43f211e1a18620c4c47cc403
-
SSDEEP
49152:Ib+u9lgqaacOW2T/HAKoOjc3bdi4HhP4tcYyBr:Ib6qa12TIa0Zi4BgtGBr
Malware Config
Signatures
Files
-
304440b8b12b40d1a5aee0c89c34ba6a9bc0be6b5e57a2fea0dd3fcd2e59fc6c.exe windows x86
3dd04afa19ea192abc884ef83622c114
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
rasapi32
RasGetConnectStatusA
winmm
midiStreamRestart
ws2_32
bind
kernel32
QueryPerformanceFrequency
user32
GetSysColorBrush
gdi32
CreateFontIndirectA
winspool.drv
ClosePrinter
comdlg32
GetOpenFileNameA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CoTaskMemAlloc
oleaut32
SafeArrayGetDim
comctl32
ImageList_Duplicate
oledlg
ord8
wininet
InternetOpenA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 676KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ