Static task
static1
Behavioral task
behavioral1
Sample
1fe19a5dea797e1a2df126c5172246c0794ccb0a039ef80d9a9e4ab8a2e170e6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1fe19a5dea797e1a2df126c5172246c0794ccb0a039ef80d9a9e4ab8a2e170e6.exe
Resource
win10v2004-20220812-en
General
-
Target
1fe19a5dea797e1a2df126c5172246c0794ccb0a039ef80d9a9e4ab8a2e170e6
-
Size
1.7MB
-
MD5
d0d966f8f37c4dfc576348de5df7cc85
-
SHA1
3821b43b8cf1f33fd2b57b5f63d9aa3d046d9f2c
-
SHA256
1fe19a5dea797e1a2df126c5172246c0794ccb0a039ef80d9a9e4ab8a2e170e6
-
SHA512
b1b84786baabeb687c91e70ce2cf28f52bf81f0f4cf7e1f49c42b000fb7a2adf1e6de7bbf201d2676185923f4df85f97139cc5518d65ed7c53d9022a9baeb2d6
-
SSDEEP
49152:TeZ1hjOSMJdFFuSeu2Z4LlFhzkSr/VOradzlOA4HnfIGl1ne:TQ1lOSeFFReubLZx8m7OASnXne
Malware Config
Signatures
Files
-
1fe19a5dea797e1a2df126c5172246c0794ccb0a039ef80d9a9e4ab8a2e170e6.exe windows x86
e9a9f004d82fb39b8cf8f727615992d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationA
user32
GetScrollPos
gdi32
ExtTextOutA
winmm
midiStreamRestart
msimg32
GradientFill
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
Shell_NotifyIconA
ole32
CreateILockBytesOnHGlobal
oleaut32
SysStringLen
comctl32
ImageList_Duplicate
oledlg
ord8
ws2_32
inet_ntoa
comdlg32
GetFileTitleA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 588KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmdata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ