Static task
static1
Behavioral task
behavioral1
Sample
8add444fef813fdc14f7f84d96eedf744d27af483d1a4e5cbae8f2e70b9a2572.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8add444fef813fdc14f7f84d96eedf744d27af483d1a4e5cbae8f2e70b9a2572.exe
Resource
win10v2004-20220812-en
General
-
Target
8add444fef813fdc14f7f84d96eedf744d27af483d1a4e5cbae8f2e70b9a2572
-
Size
1.7MB
-
MD5
7528fdd1b057cf66efd96bce95224bc0
-
SHA1
0163c3c0d487eefbcd89d3498fc1e7f03b3fec17
-
SHA256
8add444fef813fdc14f7f84d96eedf744d27af483d1a4e5cbae8f2e70b9a2572
-
SHA512
8d34ba00be0b78be74956e1fd1269fe2e55421c74c65845a7c550cce9411464364a0815e002dc3defc3f23c2e994ef5e69654cb90f59f45b8e766a2d39eac2b2
-
SSDEEP
24576:B9aVH768bvqKXo310XqTER8OCYbxPTQi688MT2vTaogMcN3r:rax768bvqB31iRlLNTOaoxcN3r
Malware Config
Signatures
Files
-
8add444fef813fdc14f7f84d96eedf744d27af483d1a4e5cbae8f2e70b9a2572.exe windows x86
a3761ca6375be7f4e3ac24ef4889bca6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutUnprepareHeader
ws2_32
accept
rasapi32
RasGetConnectStatusA
kernel32
MultiByteToWideChar
user32
GetSubMenu
gdi32
TextOutA
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
StgCreateDocfileOnILockBytes
oleaut32
SysAllocStringByteLen
comctl32
ord17
oledlg
ord8
wininet
InternetCloseHandle
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 520KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 992KB - Virtual size: 992KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ