Static task
static1
Behavioral task
behavioral1
Sample
3631ca7d8f36758bc376bc0d520026fdf9b71c1492b19e5650f957830e5bf327.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3631ca7d8f36758bc376bc0d520026fdf9b71c1492b19e5650f957830e5bf327.exe
Resource
win10v2004-20221111-en
General
-
Target
3631ca7d8f36758bc376bc0d520026fdf9b71c1492b19e5650f957830e5bf327
-
Size
58KB
-
MD5
5a0e0dd923407ccdb66e18448a26bd12
-
SHA1
c2aaecd8ad217e0ebf2feb9ebe2b8267caa72b3d
-
SHA256
3631ca7d8f36758bc376bc0d520026fdf9b71c1492b19e5650f957830e5bf327
-
SHA512
b7057847631071856e4ced4d180c7044483579d50efc94c83f24168cb1d47fe80db43c376743c45c392ec45f25ba225b3636d5e3e7b3edb1ca72005347cdb953
-
SSDEEP
1536:E54QaGeqWsLVvEgF5hx6twldS9n+yrEXtT89ozt4eau:E54Qvl3hxNdS9nrwXtKo5ha
Malware Config
Signatures
Files
-
3631ca7d8f36758bc376bc0d520026fdf9b71c1492b19e5650f957830e5bf327.exe windows x86
1b661004ad65814a7a5ecc3feb509922
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetBinaryTypeW
HeapCreate
lstrcmpiA
lstrcmpiA
Sleep
EndUpdateResourceW
CreateWaitableTimerW
GetModuleHandleA
SetLastError
GetProcessHeap
CreateNamedPipeA
GetModuleFileNameA
IsValidCodePage
lstrlenA
FileTimeToLocalFileTime
lstrcmpiA
GetLogicalDrives
SuspendThread
GetExitCodeProcess
lstrcmpiA
GetStdHandle
GetDriveTypeA
lstrcmpiA
printui
bPrinterSetup
PnPInterface
bFolderRefresh
ConstructPrinterFriendlyName
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xml Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE