Static task
static1
Behavioral task
behavioral1
Sample
52a967aaf178c96481fc5b9e60af0e88a2635f5ffc805ed1cfd1b9ef3e0fdd6c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
52a967aaf178c96481fc5b9e60af0e88a2635f5ffc805ed1cfd1b9ef3e0fdd6c.exe
Resource
win10v2004-20220901-en
General
-
Target
52a967aaf178c96481fc5b9e60af0e88a2635f5ffc805ed1cfd1b9ef3e0fdd6c
-
Size
2.5MB
-
MD5
7b55d95d1952714ad5c7a43dfc97b28d
-
SHA1
8e94123867705509e0482bf97c01e45b30ce4e39
-
SHA256
52a967aaf178c96481fc5b9e60af0e88a2635f5ffc805ed1cfd1b9ef3e0fdd6c
-
SHA512
2a34963544e5b6c12aafcf3b212fbff4a8cd5af04293635039eb5a4e845c390450ad8b662a9676932bf950b3de4806c9231c8a6a83929bb348433cd7e6df424c
-
SSDEEP
49152:etqZLjqh4LJKZbxMX/k3Wq9nJyt7nN6yU4yJrtGQS7G:WoqhYJKZbyvg9nJYgLJ8QWG
Malware Config
Signatures
Files
-
52a967aaf178c96481fc5b9e60af0e88a2635f5ffc805ed1cfd1b9ef3e0fdd6c.exe windows x86
34f3edee8a9b816216173f424a878026
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
CryptAcquireContextA
version
GetFileVersionInfoA
wsock32
WSAAsyncGetHostByName
winspool.drv
ClosePrinter
comctl32
FlatSB_GetScrollInfo
gdi32
AbortDoc
msimg32
AlphaBlend
shell32
SHGetFileInfoW
user32
ActivateKeyboardLayout
winmm
sndPlaySoundA
ole32
CLSIDFromProgID
oleaut32
CreateErrorInfo
gdiplus
GdiplusStartup
Sections
.text Size: 2.4MB - Virtual size: 9.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE