Static task
static1
Behavioral task
behavioral1
Sample
423a3ca5dbe551b610fa970145b625c29842dd4c15171740ccdde5285ad197d5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
423a3ca5dbe551b610fa970145b625c29842dd4c15171740ccdde5285ad197d5.exe
Resource
win10v2004-20221111-en
General
-
Target
423a3ca5dbe551b610fa970145b625c29842dd4c15171740ccdde5285ad197d5
-
Size
58KB
-
MD5
17536b601ced4b0a2d896640c9a1c5ea
-
SHA1
e82390eb774e06427fe096df44f460e449d238a7
-
SHA256
423a3ca5dbe551b610fa970145b625c29842dd4c15171740ccdde5285ad197d5
-
SHA512
fe1ba470ceb333df7943825d613d6cf5fe2511b4d0c573806a186a00af2cbb3619b1f7105071452dd62792e9b9bf8c63f355e916ff1937eee85bf22fbf8a6fd4
-
SSDEEP
1536:CMAvCbp8MIbL2pYw59WB6Pl/rs2jgbV9Blt/au:CRvCF8MIbL2p+ilDjgDBb/a
Malware Config
Signatures
Files
-
423a3ca5dbe551b610fa970145b625c29842dd4c15171740ccdde5285ad197d5.exe windows x86
9952a1b7e7ae12983894d977234a70c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
IsValidCodePage
GetBinaryTypeW
lstrcmpiA
GetStdHandle
GetLogicalDrives
SuspendThread
GetModuleFileNameA
SetLastError
EndUpdateResourceW
lstrlenA
CreateNamedPipeA
lstrcmpiA
GetExitCodeProcess
GetDriveTypeA
CreateWaitableTimerW
GetModuleHandleA
lstrcmpiA
FileTimeToLocalFileTime
HeapCreate
GetProcessHeap
lstrcmpiA
lstrcmpiA
printui
PnPInterface
bPrinterSetup
bFolderRefresh
ConstructPrinterFriendlyName
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xml Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE