Static task
static1
Behavioral task
behavioral1
Sample
e2931d44c6733d93c0afd553837a88d33353635addb4c71eb96b112d6b2ccfdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e2931d44c6733d93c0afd553837a88d33353635addb4c71eb96b112d6b2ccfdf.exe
Resource
win10v2004-20220812-en
General
-
Target
e2931d44c6733d93c0afd553837a88d33353635addb4c71eb96b112d6b2ccfdf
-
Size
2.5MB
-
MD5
694e09b43ad69384caa9b510e3dc5a53
-
SHA1
b20ce9414ef665253a6b10a14339973718825791
-
SHA256
e2931d44c6733d93c0afd553837a88d33353635addb4c71eb96b112d6b2ccfdf
-
SHA512
289b36965c033f7fe7c354f701d182f44845b75167f982989e34ec7e4e364437a5ca70a7bd3290cadeb14616b6197e731514830415a85409f92fc0f056437901
-
SSDEEP
49152:KO7ucy+JdrWoUsvzAxnS8NlQuhUxWwPZsJRPCslO83DT0LgQO:K04+JlUCzAxSzwaZUYqO83P0x
Malware Config
Signatures
Files
-
e2931d44c6733d93c0afd553837a88d33353635addb4c71eb96b112d6b2ccfdf.exe windows x86
34f3edee8a9b816216173f424a878026
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
CryptAcquireContextA
version
GetFileVersionInfoA
wsock32
WSAAsyncGetHostByName
winspool.drv
ClosePrinter
comctl32
FlatSB_GetScrollInfo
gdi32
AbortDoc
msimg32
AlphaBlend
shell32
SHGetFileInfoW
user32
ActivateKeyboardLayout
winmm
sndPlaySoundA
ole32
CLSIDFromProgID
oleaut32
CreateErrorInfo
gdiplus
GdiplusStartup
Sections
.text Size: 2.4MB - Virtual size: 9.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE