Static task
static1
Behavioral task
behavioral1
Sample
8a5018b67b6164d532dc17046ae3029390a72671c378c98eadeb292d53efe00f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8a5018b67b6164d532dc17046ae3029390a72671c378c98eadeb292d53efe00f.exe
Resource
win10v2004-20221111-en
General
-
Target
8a5018b67b6164d532dc17046ae3029390a72671c378c98eadeb292d53efe00f
-
Size
2.1MB
-
MD5
50eb36fd9bdf3697e177550ed2621e3e
-
SHA1
c63fe83cda2a808347693abd91a86011d030a372
-
SHA256
8a5018b67b6164d532dc17046ae3029390a72671c378c98eadeb292d53efe00f
-
SHA512
1f2714d8d778d423f8a49807edaabf60f6b30d60ae7efaa3e6855a5a5db0a06911d45820bd754acfde5f26af0972c7a1b4349a41d1102cf4916eeb349ae5a357
-
SSDEEP
49152:OI7rilY9oyqvqu7M1f+Yj3US495gdpYMwhQ5N9Q/ZHH7AXEawXNHVHX9GHHM6uHY:pvilvlvh7odpSy/jwhG1
Malware Config
Signatures
Files
-
8a5018b67b6164d532dc17046ae3029390a72671c378c98eadeb292d53efe00f.exe windows x86
b2079d9af63ad6c42847c5596ab55c71
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
winmm
midiStreamProperty
ws2_32
accept
kernel32
InterlockedIncrement
user32
LoadStringA
gdi32
GetStockObject
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromProgID
oleaut32
SafeArrayGetElement
comctl32
ord17
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 648KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 360KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ