Static task
static1
Behavioral task
behavioral1
Sample
56c07abe60a219784272b12de6860ae5d8fdd8474a93d6a96e6d68769ad305ca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
56c07abe60a219784272b12de6860ae5d8fdd8474a93d6a96e6d68769ad305ca.exe
Resource
win10v2004-20221111-en
General
-
Target
56c07abe60a219784272b12de6860ae5d8fdd8474a93d6a96e6d68769ad305ca
-
Size
2.5MB
-
MD5
5b21a9f632a49491624626ba57cf6581
-
SHA1
5c9d8b3a6ccee77e2a01abd48b5b360dc9e7ab18
-
SHA256
56c07abe60a219784272b12de6860ae5d8fdd8474a93d6a96e6d68769ad305ca
-
SHA512
2328be6320befc67d294307963d89d3efd6a46f59fba73e5a93498c802a049f3cf4444cb206bc8cbbc568e1ae6f5836db9da341eedf4edbb1687d81695ce79c1
-
SSDEEP
49152:YlO6ZeeYf801oyx8H/ST2whTAlGZv8lf9J:EOnRoyxe6T2yUGK/J
Malware Config
Signatures
Files
-
56c07abe60a219784272b12de6860ae5d8fdd8474a93d6a96e6d68769ad305ca.exe windows x86
40b31d06bc55e90cc481ea50d60a26a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasDialA
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
kernel32
MultiByteToWideChar
user32
FindWindowExA
gdi32
ExtTextOutA
winspool.drv
DocumentPropertiesA
advapi32
LookupPrivilegeValueA
shell32
Shell_NotifyIconA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
_TrackMouseEvent
wininet
InternetCanonicalizeUrlA
comdlg32
GetSaveFileNameA
msvcrt
malloc
iphlpapi
GetAdaptersInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 888KB - Virtual size: 888KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ