Static task
static1
Behavioral task
behavioral1
Sample
0041386ac008e2919e1e98e1503bcf542b95a584aea1cd546ccc2d7fc14d06a9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0041386ac008e2919e1e98e1503bcf542b95a584aea1cd546ccc2d7fc14d06a9.exe
Resource
win10v2004-20220812-en
General
-
Target
0041386ac008e2919e1e98e1503bcf542b95a584aea1cd546ccc2d7fc14d06a9
-
Size
58KB
-
MD5
b07163f6686518f149040ece80a1acd4
-
SHA1
39dee68833e0cf6f2a67a4e948beb8f4d8773d42
-
SHA256
0041386ac008e2919e1e98e1503bcf542b95a584aea1cd546ccc2d7fc14d06a9
-
SHA512
8da7217b5c260491371b68b7a05e413e67a64a18c967bc6feaf13cdab86f2fecf7b0be4069ff167a36fe419c1e91be56f084967418becb715fbb5aeb2b2db94d
-
SSDEEP
1536:VfarQ6tsYD1gtddffgoW2jD2fccprncttt0yzau:VfazetddffgoW2Ycc9ngRza
Malware Config
Signatures
Files
-
0041386ac008e2919e1e98e1503bcf542b95a584aea1cd546ccc2d7fc14d06a9.exe windows x86
57dfb5ca0946c48e8b126f247117a52b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
GetBinaryTypeW
lstrcmpiA
IsValidCodePage
lstrcmpiA
EndUpdateResourceW
GetProcessHeap
SetLastError
FileTimeToLocalFileTime
HeapCreate
GetDriveTypeA
CreateWaitableTimerW
GetExitCodeProcess
GetStdHandle
lstrcmpiA
Sleep
CreateNamedPipeA
GetModuleHandleA
lstrlenA
GetLogicalDrives
GetModuleFileNameA
SuspendThread
lstrcmpiA
printui
bPrinterSetup
PnPInterface
bFolderRefresh
ConstructPrinterFriendlyName
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xml Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE