Static task
static1
Behavioral task
behavioral1
Sample
1cd33587a8f6e8e8671dbf5c63aba1b378ba66d05c526d9b085c1f7fda1872ec.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1cd33587a8f6e8e8671dbf5c63aba1b378ba66d05c526d9b085c1f7fda1872ec.exe
Resource
win10v2004-20220812-en
General
-
Target
1cd33587a8f6e8e8671dbf5c63aba1b378ba66d05c526d9b085c1f7fda1872ec
-
Size
483KB
-
MD5
cbd012e8e23169880298e4c59fbe657a
-
SHA1
b0ba430a82948e146874e0ca0709e1309e56fb01
-
SHA256
1cd33587a8f6e8e8671dbf5c63aba1b378ba66d05c526d9b085c1f7fda1872ec
-
SHA512
2e04bace6b7baaa736f2e179fc8c600dd19c3b66e1b514a86fa3183e79583966dc6abcad0d9f26f1b1d1f5313841586e3f75ba363c2c5499e85b55f9aa8e9b7c
-
SSDEEP
12288:Ojb166Ueo9guKeoHVZ8NFWywkgAYvZgfsMgV7+K2n:O9TUeo5Ke2VZAYd3xvVVD
Malware Config
Signatures
Files
-
1cd33587a8f6e8e8671dbf5c63aba1b378ba66d05c526d9b085c1f7fda1872ec.exe windows x86
908ed81cb0a679183d4dc5c6c52d74fe
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueW
ole32
CreateStreamOnHGlobal
comctl32
InitializeFlatSB
shell32
ShellExecuteW
winspool.drv
OpenPrinterW
netapi32
Netbios
Sections
.text Size: 456KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE