Static task
static1
Behavioral task
behavioral1
Sample
83cddeb8c7f51f945757bf53b027cd3b583b69d1876500e4720742f5f9370277.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
83cddeb8c7f51f945757bf53b027cd3b583b69d1876500e4720742f5f9370277.exe
Resource
win10v2004-20220901-en
General
-
Target
83cddeb8c7f51f945757bf53b027cd3b583b69d1876500e4720742f5f9370277
-
Size
5.6MB
-
MD5
71424e075a2674fade941cc78b031dc4
-
SHA1
d32037db7f5bc9ca2b4168a02203160b5e66cbaf
-
SHA256
83cddeb8c7f51f945757bf53b027cd3b583b69d1876500e4720742f5f9370277
-
SHA512
68146ee346590586c58be80f596fd45b2e307eee706f52172def07f4528385de3a79dde33995ec004ab89013c30241145ea961cc3a0d0c468e2b0d0b5c4ad829
-
SSDEEP
98304:hKutV9BTlz+qf2PUC4J4ga6120Z2/i1cxoda2/izpMoPfjIo3HuRXJ:QSBTl6q2PUCq4gaTZ/zqd+VMo30o3+
Malware Config
Signatures
Files
-
83cddeb8c7f51f945757bf53b027cd3b583b69d1876500e4720742f5f9370277.exe windows x86
7c299d3ef9c7060c1aed48152d4fc270
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
borlndmm
@Borlndmm@SysGetMem$qqri
version
VerQueryValueA
gdi32
WidenPath
shell32
Shell_NotifyIconA
ole32
CoTaskMemFree
wsock32
WSACleanup
comctl32
ImageList_Destroy
winspool.drv
OpenPrinterA
comdlg32
PrintDlgA
winmm
PlaySoundA
msvcrt
_ftol
setupapi
SetupDiGetDeviceRegistryPropertyA
Sections
CODE Size: 5.5MB - Virtual size: 15.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE