Static task
static1
Behavioral task
behavioral1
Sample
68a632bfe116cfd01cc557497c1cf173392ace510888be2acc44a4ce086fbc5e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
68a632bfe116cfd01cc557497c1cf173392ace510888be2acc44a4ce086fbc5e.exe
Resource
win10v2004-20220812-en
General
-
Target
68a632bfe116cfd01cc557497c1cf173392ace510888be2acc44a4ce086fbc5e
-
Size
2.8MB
-
MD5
4c6cabb729e671079e49badc5646ed77
-
SHA1
1e9df4cdfa897868357053a9e565bfcbc681943c
-
SHA256
68a632bfe116cfd01cc557497c1cf173392ace510888be2acc44a4ce086fbc5e
-
SHA512
fb07a7b515bba7ea7e6a1606bd52559f263b472c9009546ee9b18a3f3997a4dd57e4154200069411767afca6d0cb8491bf6a3e50bf7df3d7aff3f2b9c5bdd718
-
SSDEEP
49152:C5/4Z+EkjnnHuYydzRYM65v4kh7Nek03HB4V/BRY4j21siGcfs9oehytO5yvgE:CyZXKHrydqMKvXNuSy4jIsiFKoehywsb
Malware Config
Signatures
Files
-
68a632bfe116cfd01cc557497c1cf173392ace510888be2acc44a4ce086fbc5e.exe windows x86
7922c0891986a50b64084052ddb49daa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHAutoComplete
winmm
waveInPrepareHeader
kernel32
UnhandledExceptionFilter
user32
GetNextDlgGroupItem
gdi32
MoveToEx
comdlg32
ChooseColorA
winspool.drv
OpenPrinterA
advapi32
RegEnumKeyA
shell32
ExtractIconA
comctl32
ImageList_LoadImageA
oledlg
ord8
ole32
CoTaskMemFree
olepro32
ord253
oleaut32
VariantCopy
ws2_32
getpeername
pdh
PdhAddCounterA
avifil32
AVIFileInit
msvfw32
DrawDibDraw
skinh
SkinH_AttachEx
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.4MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ