Static task
static1
Behavioral task
behavioral1
Sample
02874e5e64cb7b65647aa41aac550b73f9690b050e4f79ca6f40ebec14421dd4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
02874e5e64cb7b65647aa41aac550b73f9690b050e4f79ca6f40ebec14421dd4.exe
Resource
win10v2004-20220812-en
General
-
Target
02874e5e64cb7b65647aa41aac550b73f9690b050e4f79ca6f40ebec14421dd4
-
Size
333KB
-
MD5
6d048b1d9bf79d6a9678628467e7e362
-
SHA1
a283aab7a26037a10c265232f2d24056de566b11
-
SHA256
02874e5e64cb7b65647aa41aac550b73f9690b050e4f79ca6f40ebec14421dd4
-
SHA512
9d3927ccab22c61267ad726b733a07d49d28b71c9ea55591342a90e2f6cae58a5b10ab8a077d3256119a8379c3c7a45c279136670c75400e1adfd6d83244962a
-
SSDEEP
6144:dNGRCOGhuLNcjsiiS6E1F1aBBj9qONK6jKnL6asCM1Vo/nPk8Nso:aeup0if6HaTRKVN9M1+
Malware Config
Signatures
Files
-
02874e5e64cb7b65647aa41aac550b73f9690b050e4f79ca6f40ebec14421dd4.exe windows x86
767c736b3fa35b29560fcce8d65b8372
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
wsock32
WSACleanup
winmm
mixerOpen
version
VerQueryValueA
comctl32
ord6
psapi
GetModuleBaseNameA
user32
GetDC
gdi32
BitBlt
comdlg32
GetSaveFileNameA
advapi32
RegCloseKey
shell32
DragFinish
ole32
CoGetObject
oleaut32
SafeArrayGetLBound
Sections
.MPRESS1 Size: 307KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE