Static task
static1
Behavioral task
behavioral1
Sample
5bf855cf60647d830bada4c189edde167ee53539d9fd336d351aee0d7d13f893.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5bf855cf60647d830bada4c189edde167ee53539d9fd336d351aee0d7d13f893.exe
Resource
win10v2004-20220812-en
General
-
Target
5bf855cf60647d830bada4c189edde167ee53539d9fd336d351aee0d7d13f893
-
Size
1.7MB
-
MD5
b5b0483d42d6af239d53c74e35191cce
-
SHA1
f3c5098e0146e0ff75204a6e8084758529893008
-
SHA256
5bf855cf60647d830bada4c189edde167ee53539d9fd336d351aee0d7d13f893
-
SHA512
bb563f377839b155bd5532ee4e357e8220ae340b1006395e4495a7cee2ef83062ef299f6993d8efe4bf12485c56189c48da247ec9047c7a76284e4866c14f4d4
-
SSDEEP
24576:tqxQoBleNVZ/RpaRnPNOR2Wk9udZntN1Rtk31P/3R4FrmYxVK6WMG75c5X0IIzA8:hoBlQVNGpPltudnPM1R4FrdC6qcT
Malware Config
Signatures
Files
-
5bf855cf60647d830bada4c189edde167ee53539d9fd336d351aee0d7d13f893.exe windows x86
32793c39987e1deb5fa5b1ee9568f102
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
WindowFromDC
gdi32
GetClipRgn
msimg32
AlphaBlend
winspool.drv
OpenPrinterA
advapi32
RegDeleteKeyA
shell32
ShellExecuteA
shlwapi
PathIsUNCA
uxtheme
GetWindowTheme
ole32
GetClassFile
oleaut32
VarBstrFromCy
oledlg
ord7
gdiplus
GdipDrawImageRectI
oleacc
CreateStdAccessibleObject
imm32
ImmReleaseContext
winmm
PlaySoundA
Sections
.text Size: 1.7MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE