Static task
static1
Behavioral task
behavioral1
Sample
ba29700f5bba4a0cf66430e3eaf8bdd208dc8351ed7514613b17c12d10c1ff47.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba29700f5bba4a0cf66430e3eaf8bdd208dc8351ed7514613b17c12d10c1ff47.exe
Resource
win10v2004-20220812-en
General
-
Target
ba29700f5bba4a0cf66430e3eaf8bdd208dc8351ed7514613b17c12d10c1ff47
-
Size
1.9MB
-
MD5
ea83bbd18e2c1c6ab05c70799305df9a
-
SHA1
1937a6a6b1b1e3ca1ce4769305af9bcd47511b08
-
SHA256
ba29700f5bba4a0cf66430e3eaf8bdd208dc8351ed7514613b17c12d10c1ff47
-
SHA512
520215aa2db69f9da30b089d1aa851ed575f3193614aaa8c1b89cddff2007de4be68f28a31a4481fe5dbe3ca56f937ae0efa2234b43cc4589a6ca5e49ceabc90
-
SSDEEP
49152:ErDRyirLReVp0UFSA72r2NWMqsyF63yHAvB:ErIiJCir2kMqsykCgZ
Malware Config
Signatures
Files
-
ba29700f5bba4a0cf66430e3eaf8bdd208dc8351ed7514613b17c12d10c1ff47.exe windows x86
f9e09148e003e42b72d353e43504945f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
rasapi32
RasGetConnectStatusA
kernel32
FreeEnvironmentStringsA
user32
CheckMenuItem
gdi32
ExtSelectClipRgn
winmm
waveOutGetNumDevs
winspool.drv
DocumentPropertiesA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
odbc32
ord50
comctl32
ImageList_Write
ws2_32
recvfrom
wininet
InternetCanonicalizeUrlA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 592KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ