Static task
static1
Behavioral task
behavioral1
Sample
b145031f2eb63a620b93f20b0e95435263053567a652634f66372decc7a1ed1f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b145031f2eb63a620b93f20b0e95435263053567a652634f66372decc7a1ed1f.exe
Resource
win10v2004-20221111-en
General
-
Target
b145031f2eb63a620b93f20b0e95435263053567a652634f66372decc7a1ed1f
-
Size
495KB
-
MD5
7a3ff86bffc90bf9e70df79b30bad8ea
-
SHA1
4dbcc688b2a1ac5094241d44c820b403c441de5c
-
SHA256
b145031f2eb63a620b93f20b0e95435263053567a652634f66372decc7a1ed1f
-
SHA512
b19f00ed284eec5120c6916b0e08f842a7d3c5609859f3773ce36d7667f6bbdf1dce06abbe0eb141dde37de7cf3b88feb6e339ebdb4ae09338600106d50b0a89
-
SSDEEP
6144:lVgSwHxbPGoQuBO8MW8tHd0mX8CREmmKiR9bn1nfPwByh95OWnCLiT9BOGVoHhHE:lVboQqOHsCEmmKiR5lXLDnCLiDOFkp9
Malware Config
Signatures
Files
-
b145031f2eb63a620b93f20b0e95435263053567a652634f66372decc7a1ed1f.exe windows x86
885304a37e4c9257ac80ebe6746c94d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
MessageBoxA
gdi32
UnrealizeObject
version
VerQueryValueW
ole32
OleUninitialize
comctl32
InitializeFlatSB
shell32
Shell_NotifyIconW
wininet
InternetReadFile
winspool.drv
OpenPrinterW
Sections
.text Size: 487KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE