Static task
static1
Behavioral task
behavioral1
Sample
a1c3bc79faca8e9fd788754e33fd0f66e8d264691a9aff5599a03678a1954f85.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1c3bc79faca8e9fd788754e33fd0f66e8d264691a9aff5599a03678a1954f85.exe
Resource
win10v2004-20220812-en
General
-
Target
a1c3bc79faca8e9fd788754e33fd0f66e8d264691a9aff5599a03678a1954f85
-
Size
2.2MB
-
MD5
49cab521cfaed84542d954ff479fb5cd
-
SHA1
991b2b2772d768f50046dd11043848ab75eaea17
-
SHA256
a1c3bc79faca8e9fd788754e33fd0f66e8d264691a9aff5599a03678a1954f85
-
SHA512
b1e42f127aea584d3fa68d3f1d8013b120c8d1b0a191cc80c1d225a1f5b9fb023749e36d603ab729dedf9e2a515a0dfea6a4e656bca143471567d02179338cae
-
SSDEEP
49152:bw/cq0U8Mi6s8wjD0YyVz1CaAuvb1z6ojmH4r6/dXgJpyFyIx1DifSyw:0cNMi6s88LkZ1z6zqWdXOSifSyw
Malware Config
Signatures
Files
-
a1c3bc79faca8e9fd788754e33fd0f66e8d264691a9aff5599a03678a1954f85.exe windows x86
39f53e30d8636c7b1cc3a77dc51236fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
user32
OpenClipboard
gdi32
ScaleWindowExtEx
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Read
ws2_32
accept
comdlg32
ChooseColorA
msvcrt
_onexit
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 719KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ