Static task
static1
Behavioral task
behavioral1
Sample
2c79dbe588b8ed4bf01d0e8de3017ca25384a857174ebbd416c67c8705ed6844.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2c79dbe588b8ed4bf01d0e8de3017ca25384a857174ebbd416c67c8705ed6844.exe
Resource
win10v2004-20220812-en
General
-
Target
2c79dbe588b8ed4bf01d0e8de3017ca25384a857174ebbd416c67c8705ed6844
-
Size
291KB
-
MD5
aca2752f1b0e77fcbb63143bf7654c4d
-
SHA1
16d434a96bd19074b35737913e6105b5e63849e7
-
SHA256
2c79dbe588b8ed4bf01d0e8de3017ca25384a857174ebbd416c67c8705ed6844
-
SHA512
5092d5937bad9d88d618dbc658a10cb6716bbfe536fcf7f10da7135d43faa4624716be30e265834a7b9cd45e2e0b50157cdcbe88f2a07fcc9021dcfa73f72b6c
-
SSDEEP
6144:qlvaKc95o61lYkvvAP69aBk3m5ZZuLtcm39Ztu:ZKcg61ikvvAP6y5GX7k
Malware Config
Signatures
Files
-
2c79dbe588b8ed4bf01d0e8de3017ca25384a857174ebbd416c67c8705ed6844.exe windows x86
691f1193f16065947032ace3a2329e55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
fabs
comctl32
InitCommonControls
user32
IsChild
gdi32
BitBlt
ole32
CoInitialize
shell32
ShellExecuteExA
shlwapi
PathQuoteSpacesA
Sections
.MPRESS1 Size: 21KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE