Static task
static1
Behavioral task
behavioral1
Sample
7c1300c17ffd8ebda4d2aa709f701339f8dc6e914d1a310cefb6b8af3bee1c32.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c1300c17ffd8ebda4d2aa709f701339f8dc6e914d1a310cefb6b8af3bee1c32.exe
Resource
win10v2004-20220812-en
General
-
Target
7c1300c17ffd8ebda4d2aa709f701339f8dc6e914d1a310cefb6b8af3bee1c32
-
Size
178KB
-
MD5
25ff77ebf6fffc310738d23883c6508c
-
SHA1
8edd16bc0720fde0402a6f32d3210ab5b86da073
-
SHA256
7c1300c17ffd8ebda4d2aa709f701339f8dc6e914d1a310cefb6b8af3bee1c32
-
SHA512
2d45a263a9e4f0142e3234400859b58d44a53aeacfd940c20b9f40f92d29e86b31ffc6677ad9eb6c7beb386d24841dd386b9890e3f9baff9657e8ddf30f5b514
-
SSDEEP
3072:QkepzrmGdEE/bHG6k8L5NnT9ccpPElUOGinhafz8bpyCp5VlkjrFLjpyQHAOn:CPmGK+Dm8L5FT9np+LGinhafQbpyayQG
Malware Config
Signatures
Files
-
7c1300c17ffd8ebda4d2aa709f701339f8dc6e914d1a310cefb6b8af3bee1c32.exe windows x86
91463b115fcca271f163d5d720f13d68
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
winspool.drv
ClosePrinter
kernel32
GetVersionExA
FreeLibrary
GetTempPathA
LoadLibraryA
GetModuleHandleW
CreateProcessA
DeleteFileA
GetVersionExA
CreateDirectoryA
GetFileAttributesA
GetCurrentProcessId
CompareStringA
InterlockedExchange
GetModuleHandleA
GetWindowsDirectoryA
GetSystemDirectoryA
FlushInstructionCache
VirtualQuery
GetVersion
SetLastError
CloseHandle
QueryPerformanceCounter
shell32
SHLimitInputEdit
ShellExecuteA
advapi32
RegQueryValueExW
RegOpenKeyExW
ElfOldestRecord
RegSetValueExW
RegCreateKeyExW
RegCloseKey
Sections
.text Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ