Static task
static1
Behavioral task
behavioral1
Sample
c686c36fd6785aee10081770a353863870c1d1c3962edf669329a6d38bc6db98.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c686c36fd6785aee10081770a353863870c1d1c3962edf669329a6d38bc6db98.exe
Resource
win10v2004-20220812-en
General
-
Target
c686c36fd6785aee10081770a353863870c1d1c3962edf669329a6d38bc6db98
-
Size
723KB
-
MD5
08f8f4676689aa18114d687f437f4020
-
SHA1
0a9c8784b5b71b27f1bb25147732cbf51ff5e4c7
-
SHA256
c686c36fd6785aee10081770a353863870c1d1c3962edf669329a6d38bc6db98
-
SHA512
636d6758433116d6cfe5caa971c42570580d725f259233fef540389076487ddff3c17f2fdefbc772e6bacc17f9974a3a0d752b6765f9580d5f7a08590646ea5e
-
SSDEEP
12288:8/TyKyF9ZsjAFUE8AiQZ+1r8is5Ok0LK2BlGZvQO2jAzLmcgEpfwt2ljyfXpXmGz:TXFYEDix13ZMvQO2OmcgqfwTfNmG/
Malware Config
Signatures
Files
-
c686c36fd6785aee10081770a353863870c1d1c3962edf669329a6d38bc6db98.exe windows x86
dd8f47eac95940b62d348451e37edcb1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
user32
GetMenu
gdi32
Escape
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ord17
comdlg32
ChooseColorA
Sections
.text Size: 678KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE