Static task
static1
Behavioral task
behavioral1
Sample
5d8f2a831becc7c0fe5c63a6db1d8016d63b06d058c421319cb6dc4dee06598b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5d8f2a831becc7c0fe5c63a6db1d8016d63b06d058c421319cb6dc4dee06598b.exe
Resource
win10v2004-20220812-en
General
-
Target
5d8f2a831becc7c0fe5c63a6db1d8016d63b06d058c421319cb6dc4dee06598b
-
Size
8.8MB
-
MD5
d3bc42894d3488a3a50ed2f521103bd4
-
SHA1
3dfcddf4ee2e652910dffa6dc260f7ea20015bc0
-
SHA256
5d8f2a831becc7c0fe5c63a6db1d8016d63b06d058c421319cb6dc4dee06598b
-
SHA512
f36bc6d51e3f18d32b78cce9628ef1c4e6af07fed74a70c3f74523106bbdb2515fb73095d3ba8ec75fd1601d8adcb86ff6fc1c2e9b5eef6c53d48087fd876eed
-
SSDEEP
196608:Ex5HgruVIy4B7ax5WAp3pLiFWbEZ+7VmLjawF1W3sntdPv6OigsXkmE:IHeuC5a3WY3tiFWQkUqi1tnXq9tE
Malware Config
Signatures
Files
-
5d8f2a831becc7c0fe5c63a6db1d8016d63b06d058c421319cb6dc4dee06598b.exe windows x86
2b257a6a12c4055ef637d3118c96deab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
div
mfc42
ord1253
user32
GetDC
gdi32
BitBlt
shlwapi
PathFileExistsA
winmm
PlaySoundA
ws2_32
WSAAsyncSelect
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
rasapi32
RasHangUpA
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
PrintDlgA
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleRun
oleaut32
SafeArrayGetLBound
odbc32
ord19
comctl32
ord17
wininet
InternetCloseHandle
Sections
.MPRESS1 Size: 7.9MB - Virtual size: 29.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 953KB - Virtual size: 953KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE