Static task
static1
Behavioral task
behavioral1
Sample
3f1709224c113a36e8b3a7d4bb24b9ec35b762d94a8218f8f4c0b82c9ed51cbb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3f1709224c113a36e8b3a7d4bb24b9ec35b762d94a8218f8f4c0b82c9ed51cbb.exe
Resource
win10v2004-20221111-en
General
-
Target
3f1709224c113a36e8b3a7d4bb24b9ec35b762d94a8218f8f4c0b82c9ed51cbb
-
Size
9.2MB
-
MD5
3685bf179182825f79569a5ed730f586
-
SHA1
db87834bd9183183085e2ec1880729a07b88059e
-
SHA256
3f1709224c113a36e8b3a7d4bb24b9ec35b762d94a8218f8f4c0b82c9ed51cbb
-
SHA512
e5fccab9d05abe8f6838f582bc5326af15c9c12353a9062c47d85f6b76b2ee24e195154c1dbe622919a92414ddb933af16f3436d42575a6e892aa39d3f0150a3
-
SSDEEP
196608:sVOMAQtJHQbegJtU6ZPYW251neAjnqjIxycT7B:kASQyRwYW239nqjMlV
Malware Config
Signatures
Files
-
3f1709224c113a36e8b3a7d4bb24b9ec35b762d94a8218f8f4c0b82c9ed51cbb.exe windows x86
444d3947a50074adeb9eec7e23480b74
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
user32
IsRectEmpty
gdi32
GetWindowExtEx
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
advapi32
RegEnumKeyA
shell32
DragFinish
comctl32
InitCommonControlsEx
shlwapi
PathIsUNCA
ole32
CreateStreamOnHGlobal
oleaut32
OleCreateFontIndirect
oledlg
ord8
gdiplus
GdipDrawImageI
ws2_32
htonl
oleacc
AccessibleObjectFromWindow
imm32
ImmReleaseContext
winmm
PlaySoundA
msvcrt
__dllonexit
psapi
GetMappedFileNameW
Sections
.text Size: 7.7MB - Virtual size: 7.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ