TMethodImplementationIntercept
Static task
static1
Behavioral task
behavioral1
Sample
ba3b7741335c64fb96b20b0c3e483e779d6d78d6373ca2cd1f7e1d0d3d165038.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ba3b7741335c64fb96b20b0c3e483e779d6d78d6373ca2cd1f7e1d0d3d165038.exe
Resource
win10v2004-20220812-en
General
-
Target
ba3b7741335c64fb96b20b0c3e483e779d6d78d6373ca2cd1f7e1d0d3d165038
-
Size
678KB
-
MD5
a0990d16fc281a1e5395476a7109d893
-
SHA1
584d71be42917065caf8ddc637e2f24a239318de
-
SHA256
ba3b7741335c64fb96b20b0c3e483e779d6d78d6373ca2cd1f7e1d0d3d165038
-
SHA512
1b56070b7a94cb9a0aba31576de029fae83505e0951b9e74c687a81ce10ee7ba77e60a4d46ee496437b5445fb3edda24ca70d36664f6e7b63131bbf18c29daa2
-
SSDEEP
12288:HIbgvtg/ihHFSFcCH30i46UyBPUKf4PwUNG51h0cvw6L67oAsjIaYt9aQe:HIQci2FcC0ibdB8VPw+AWjs
Malware Config
Signatures
Files
-
ba3b7741335c64fb96b20b0c3e483e779d6d78d6373ca2cd1f7e1d0d3d165038.exe windows x86
b6a649da7c56aed403c2390817011530
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
oleaut32
SysFreeString
advapi32
RegCloseKey
user32
CharNextW
gdi32
Pie
version
VerQueryValueW
ole32
IsEqualGUID
comctl32
ImageList_Add
shell32
Shell_NotifyIconW
wininet
InternetOpenW
comdlg32
ChooseColorW
winspool.drv
OpenPrinterW
oleacc
LresultFromObject
winmm
sndPlaySoundW
Exports
Exports
Sections
.MPRESS1 Size: 563KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE