Static task
static1
Behavioral task
behavioral1
Sample
be18ddce6abdffb306235278efd88f425f187538598e3418b87818d9aa7256d8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
be18ddce6abdffb306235278efd88f425f187538598e3418b87818d9aa7256d8.exe
Resource
win10v2004-20220901-en
General
-
Target
be18ddce6abdffb306235278efd88f425f187538598e3418b87818d9aa7256d8
-
Size
282KB
-
MD5
800711326ac430ef133983b357a37edc
-
SHA1
8d3ee42e2bf741127fbc27a45bd565493a60fa4a
-
SHA256
be18ddce6abdffb306235278efd88f425f187538598e3418b87818d9aa7256d8
-
SHA512
11b993ba31933b58d8a9759923eab432d0052cfe53e4243881c2e478b58c56567b12b6acc481ee0725eafbb8f82cd76722af5eb800eadf5c88ecb666b5e41a0e
-
SSDEEP
6144:4yRRM5ql+dTdBWeeLaxsFAUr+ilIsOSFjFFNmXEggg7:5RMwMBxEA6ZOS/FNmXX
Malware Config
Signatures
Files
-
be18ddce6abdffb306235278efd88f425f187538598e3418b87818d9aa7256d8.exe windows x86
a83a0fa8afce7f933755d179cc9f1d6b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
dhplay
ord97
user32
TrackPopupMenu
gdi32
CreatePen
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
advapi32
RegEnumKeyW
shell32
SHGetPathFromIDListW
comctl32
ImageList_GetIconSize
shlwapi
PathIsUNCW
oledlg
OleUIBusyW
ole32
CoRegisterMessageFilter
oleaut32
SysAllocString
Sections
.text Size: 254KB - Virtual size: 764KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE