Static task
static1
Behavioral task
behavioral1
Sample
47c1fd7a319688a2d4b8354a5deb79671687f9d1e0c18f143996690a3e91c619.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
47c1fd7a319688a2d4b8354a5deb79671687f9d1e0c18f143996690a3e91c619.exe
Resource
win10v2004-20221111-en
General
-
Target
47c1fd7a319688a2d4b8354a5deb79671687f9d1e0c18f143996690a3e91c619
-
Size
609KB
-
MD5
6bbe97d9c9f57815093077a0082c0c9d
-
SHA1
e7019309db5e781a73f1888fd75004d6759e3de9
-
SHA256
47c1fd7a319688a2d4b8354a5deb79671687f9d1e0c18f143996690a3e91c619
-
SHA512
c3b451a16b687d7e06a029dff9e79c8ce4b143e2a9c389ce7cdbca433a8b6d9ec1b998210758097582486ae0cd8f1ff3d794e536943865299eb0a3e0f49a3701
-
SSDEEP
12288:gOtMcCwaIl7pfUxMfogIxe9XJovqtp41hodJI5wKsuILf:glN4fUxMftIxm1pgodOk
Malware Config
Signatures
Files
-
47c1fd7a319688a2d4b8354a5deb79671687f9d1e0c18f143996690a3e91c619.exe windows x86
4c6b384817546b76bc81f80c67cf1f9b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
CryptHashData
comctl32
_TrackMouseEvent
comdlg32
PrintDlgW
gdi32
SetBkMode
ole32
CreateStreamOnHGlobal
oleaut32
SysAllocStringLen
shell32
SHGetFolderPathW
shlwapi
SHDeleteEmptyKeyW
user32
GetPropW
ws2_32
connect
winspool.drv
OpenPrinterW
netapi32
NetUserGetInfo
msimg32
GradientFill
iphlpapi
GetIpAddrTable
wininet
InternetQueryOptionA
dnsapi
DnsQuery_W
secur32
DecryptMessage
gdiplus
GdipGetGenericFontFamilySansSerif
Sections
.text Size: 572KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE