Static task
static1
Behavioral task
behavioral1
Sample
7abffb22a85ce4197a896afc1fd033d18b6278bb4b053d241e1616bb3f69062d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7abffb22a85ce4197a896afc1fd033d18b6278bb4b053d241e1616bb3f69062d.exe
Resource
win10v2004-20220812-en
General
-
Target
7abffb22a85ce4197a896afc1fd033d18b6278bb4b053d241e1616bb3f69062d
-
Size
58KB
-
MD5
052b8bd1e6f6220b6c9689dcb6311630
-
SHA1
36542cbf913333c393808be1a6552da42d04371e
-
SHA256
7abffb22a85ce4197a896afc1fd033d18b6278bb4b053d241e1616bb3f69062d
-
SHA512
c97b1dadc1cfae9c5f2fb03c666cee50ba5ae25af3fd1f5dfabd134b4960fab4bf0cd3f9448756b4e2fb386a539870053527577eab67c29a7e23493c8d2000e9
-
SSDEEP
1536:zd35348OJzHt7AZY5XEhdUpoFlYUkdr4EdW6H0w2:zdN48OFBHOAoTYlr0i0w
Malware Config
Signatures
Files
-
7abffb22a85ce4197a896afc1fd033d18b6278bb4b053d241e1616bb3f69062d.exe windows x86
d53479327e99b5753be1fc53331d3dc1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
GetLogicalDrives
Sleep
CreateWaitableTimerW
GetModuleFileNameA
FileTimeToLocalFileTime
lstrcmpiA
CreateNamedPipeA
GetProcessHeap
GetBinaryTypeW
lstrcmpiA
GetDriveTypeA
IsValidCodePage
GetExitCodeProcess
GetStdHandle
lstrcmpiA
lstrlenA
SuspendThread
EndUpdateResourceW
lstrcmpiA
lstrcmpiA
GetModuleHandleA
HeapCreate
printui
bFolderRefresh
ConstructPrinterFriendlyName
bPrinterSetup
PnPInterface
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xml Size: 1024B - Virtual size: 650B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE