Static task
static1
Behavioral task
behavioral1
Sample
31bde0c3f5193b045feb45eb77b8ffa418e04588687260f3a9c2fe84199c504f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
31bde0c3f5193b045feb45eb77b8ffa418e04588687260f3a9c2fe84199c504f.exe
Resource
win10v2004-20220812-en
General
-
Target
31bde0c3f5193b045feb45eb77b8ffa418e04588687260f3a9c2fe84199c504f
-
Size
332KB
-
MD5
84ec99278505e115c1116209798cadd7
-
SHA1
3c17ffa958f874795478e1ddf70ed8ee23f5394e
-
SHA256
31bde0c3f5193b045feb45eb77b8ffa418e04588687260f3a9c2fe84199c504f
-
SHA512
7f79034fb109f830a5ee0d9aa16ad27b70711c7e54a73e962e82f9031ff6f2dd2a37c91cb10eed91e1c0c516d7f8e0474de629f44ee9166bff33014e149c1cda
-
SSDEEP
6144:nU1g6cJu0wVTpondi/xA1JxFRCUfm3vSkxbQHfd4tMNn3cxoRec:nUcJHwzoeAJFRCk/0k/mW3moRl
Malware Config
Signatures
Files
-
31bde0c3f5193b045feb45eb77b8ffa418e04588687260f3a9c2fe84199c504f.exe windows x86
1fd3c33bce940d9c8e47e1b9ffe3064a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
ExtFloodFill
AbortDoc
EndPage
CreateDiscardableBitmap
ExcludeClipRect
CombineTransform
CreateEllipticRgn
GetBkColor
CancelDC
Chord
kernel32
GetProcAddress
GetTickCount
GetCurrentProcess
GetCommandLineA
GetCurrentThreadId
DeleteFileA
CopyFileA
GetLastError
VirtualAlloc
GetCurrentProcessId
GetVersion
GetModuleHandleA
GetStartupInfoA
winspool.drv
ConfigurePortA
EnumPrinterDataExA
DeleteFormA
DeletePrinterConnectionA
AddPrinterA
ClosePrinter
DeletePrinterDataA
AbortPrinter
AddFormA
ConnectToPrinterDlg
DeletePrinter
DeletePrinterKeyA
AddJobA
AddPrinterConnectionA
AdvancedDocumentPropertiesA
msvcrt
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 312KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kiesro Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ