Static task
static1
Behavioral task
behavioral1
Sample
4db00eff88775d0ca4ff146390377419a1ed0aaa42f8bc20025d6e610c594320.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4db00eff88775d0ca4ff146390377419a1ed0aaa42f8bc20025d6e610c594320.exe
Resource
win10v2004-20220812-en
General
-
Target
4db00eff88775d0ca4ff146390377419a1ed0aaa42f8bc20025d6e610c594320
-
Size
589KB
-
MD5
27d88943a9027cb8b5103588e710a905
-
SHA1
a93606174b33c123acd76dcb838a2c886e8ed095
-
SHA256
4db00eff88775d0ca4ff146390377419a1ed0aaa42f8bc20025d6e610c594320
-
SHA512
ff920019280afed2547c9e075444d94a6b9f5438e4c329f9fa12cd1953be13ee0282cf93eaad37892ab90d365e0f1919693eccf6cd9a69fe262cc84fd5f62da9
-
SSDEEP
12288:9/LoXztCuElurf8uCvBsum27OM6fCXbJCoOjKaOLaX:VkXztCXMrf81BiM6u4f/O2X
Malware Config
Signatures
Files
-
4db00eff88775d0ca4ff146390377419a1ed0aaa42f8bc20025d6e610c594320.exe windows x86
7b6b8c03a7b3799634f81086c4460dd3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
advapi32
RegQueryValueExW
winspool.drv
GetDefaultPrinterW
OpenPrinterW
oleaut32
VariantCopy
SysFreeString
comctl32
ImageList_ReplaceIcon
shell32
SHGetSpecialFolderPathW
msimg32
AlphaBlend
ole32
CoTaskMemFree
CLSIDFromString
comdlg32
GetOpenFileNameW
version
GetFileVersionInfoSizeW
gdi32
ExtFloodFill
Sections
.shared Size: - Virtual size: 896KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE