Static task
static1
Behavioral task
behavioral1
Sample
0e7de5525b502437e5a38c56ab6678c2f8266b50926324c25eb65bdf80766f0f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0e7de5525b502437e5a38c56ab6678c2f8266b50926324c25eb65bdf80766f0f.exe
Resource
win10v2004-20220812-en
General
-
Target
0e7de5525b502437e5a38c56ab6678c2f8266b50926324c25eb65bdf80766f0f
-
Size
2.0MB
-
MD5
a485760c8531963f346d357f045c0236
-
SHA1
e2c0b34186bfe72537003ebb100c58eca4b1838f
-
SHA256
0e7de5525b502437e5a38c56ab6678c2f8266b50926324c25eb65bdf80766f0f
-
SHA512
3c59c91c5a8e440b8e8ad820b62e48435eaf1b38c6fe60b6847dec8cdfe6becc5895e8a76f91d7f6b2f0b5fd761c203d3ef429a62cb4f2df9b11811177e6f37a
-
SSDEEP
49152:1QwMNrpSj+xYTu3LaXU5EMkt8sP/maE1FkGc8LE/2Zf2g05/alvaq:1Pqok/p5E9tPPpGc12Vf05/Sd
Malware Config
Signatures
Files
-
0e7de5525b502437e5a38c56ab6678c2f8266b50926324c25eb65bdf80766f0f.exe windows x86
02b7bb1d47b3b7341001b57ecc656257
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
winmm
PlaySoundA
ws2_32
inet_ntoa
rasapi32
RasGetConnectStatusA
kernel32
GetTimeZoneInformation
user32
GetSysColorBrush
gdi32
EndPage
msimg32
GradientFill
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CoRegisterMessageFilter
oleaut32
VariantInit
comctl32
ImageList_Destroy
oledlg
ord8
wininet
InternetSetOptionA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 924KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmdata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ