Static task
static1
Behavioral task
behavioral1
Sample
747e0a45b7aa42aa1f050832f46a07c9b4be8d8f812e1f5321ebab0c6ed9a932.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
747e0a45b7aa42aa1f050832f46a07c9b4be8d8f812e1f5321ebab0c6ed9a932.exe
Resource
win10v2004-20221111-en
General
-
Target
747e0a45b7aa42aa1f050832f46a07c9b4be8d8f812e1f5321ebab0c6ed9a932
-
Size
96KB
-
MD5
d50ae3b9f4ed137494ad275344c3234e
-
SHA1
a3715d6c87cbabbbfa441d1c1ba838283d43b284
-
SHA256
747e0a45b7aa42aa1f050832f46a07c9b4be8d8f812e1f5321ebab0c6ed9a932
-
SHA512
4a599c00c954abb75b30dc965bac7613889388239efc1d831238eb6e94c148045f0aaba45793e48613b8063ddfd0090033596c7b1e2b1aae7d1dcb144ea63585
-
SSDEEP
1536:2Y3sO2VIrTgked9k9tVijJ/oFuKLD/M0TYu8E6FB2ujm4G:2jO2/ld2VijJ/orplWcu
Malware Config
Signatures
Files
-
747e0a45b7aa42aa1f050832f46a07c9b4be8d8f812e1f5321ebab0c6ed9a932.exe windows x86
28ebf65b1d0cdc4a15e8c5a111ce0934
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oledlg
ord12
ord10
ord1
ord7
ord9
ord3
ord8
ord2
ord6
ord4
ord11
ord5
shlwapi
PathGetDriveNumberA
PathUnmakeSystemFolderA
SHRegGetUSValueA
PathGetArgsA
kernel32
GetModuleHandleA
GetProcAddress
GetEnvironmentVariableA
VirtualAlloc
GetHandleInformation
ResetEvent
SetEvent
GetStartupInfoA
OpenMutexA
GetCurrentProcessId
ResumeThread
QueryPerformanceCounter
CloseHandle
GetCommandLineA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetLastError
SetFilePointer
ReadFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
InitializeCriticalSection
SetStdHandle
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
LoadLibraryA
FlushFileBuffers
LCMapStringA
LCMapStringW
version
VerInstallFileA
VerFindFileA
GetFileVersionInfoA
GetFileVersionInfoSizeA
winspool.drv
AddPrinterA
EnumPrintersA
EnumPrintersW
DeletePrinterDriverExA
AddPrinterConnectionA
AddJobA
AddPrintProcessorA
DeletePrinter
AdvancedDocumentPropertiesA
uxtheme
GetThemeSysString
ws2_32
recvfrom
gethostbyname
recv
inet_addr
getservbyport
shutdown
closesocket
getprotobynumber
bind
gethostname
accept
wsnmp32
ord200
aclui
ord2
ord1
cryptui
CryptUIWizExport
CryptUIWizImport
CryptUIDlgViewContext
CryptUIWizDigitalSign
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ