Static task
static1
Behavioral task
behavioral1
Sample
10c4a1fbf4f337d5ce5a58480b22294d4aa13710142fa44e229653761baa5cf8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
10c4a1fbf4f337d5ce5a58480b22294d4aa13710142fa44e229653761baa5cf8.exe
Resource
win10v2004-20220901-en
General
-
Target
10c4a1fbf4f337d5ce5a58480b22294d4aa13710142fa44e229653761baa5cf8
-
Size
177KB
-
MD5
0791236f8722da625a6653dee48a7221
-
SHA1
4f9c9820d58ffd6ec74bfdbafa8c483a16f3cb0e
-
SHA256
10c4a1fbf4f337d5ce5a58480b22294d4aa13710142fa44e229653761baa5cf8
-
SHA512
afa81823a784d94185dacd232ca3c926cc1dfbb21c558eb25bdc154460640c83450d2ceb8459666f6264a9ebf40f80968a5bdd553b628cd3ea3a4449d23ebf17
-
SSDEEP
3072:bOcb+IVV7wQq4+RrZCtUFOxDev0Bsch+asQIubmYQY4t3gEVy6G:bBLPs1CtYhv0BschemmYd4pV
Malware Config
Signatures
Files
-
10c4a1fbf4f337d5ce5a58480b22294d4aa13710142fa44e229653761baa5cf8.exe windows x86
36b1ba7df6c001ae651eb70f5c0d9b17
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
winspool.drv
DocumentPropertiesW
kernel32
GetVersionExW
lstrcpyA
RemoveDirectoryW
lstrcmpiW
LoadLibraryA
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
shell32
ord201
ShellExecuteA
advapi32
RegQueryValueExW
RegOpenKeyExW
ElfOpenEventLogA
RegSetValueExW
RegCreateKeyExW
RegCloseKey
Sections
.text Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ