Static task
static1
Behavioral task
behavioral1
Sample
0b684866b52e56ee719c858b2150b93f3e30ad3a86dd71b45cebf897d8117d8b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0b684866b52e56ee719c858b2150b93f3e30ad3a86dd71b45cebf897d8117d8b.exe
Resource
win10v2004-20220812-en
General
-
Target
0b684866b52e56ee719c858b2150b93f3e30ad3a86dd71b45cebf897d8117d8b
-
Size
380KB
-
MD5
2499f90637579fae92bc7f79d954c7b0
-
SHA1
a5262dc915b1ba34c1bdf9aa073c2ebbbc6ca7f3
-
SHA256
0b684866b52e56ee719c858b2150b93f3e30ad3a86dd71b45cebf897d8117d8b
-
SHA512
31e5501dab767a9c7d2515a02618c1b42e8c2c780277f630a9618561547fbdb6fbe6c32b274eb0cce3550a7c236e0477c3cf9cf335040e20b0d55bd073398abe
-
SSDEEP
6144:kmQ9qz/Ylj+PiXt6jO7JQKT1xopfI9yfV5d85jW8bIQ:kmQ9qz/EqPClJBBCeGzdsh
Malware Config
Signatures
Files
-
0b684866b52e56ee719c858b2150b93f3e30ad3a86dd71b45cebf897d8117d8b.exe windows x86
5ee0d146292a4d3cd3e543dd755df065
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetWindowTextW
advapi32
RegQueryValueExW
shell32
ShellExecuteA
ws2_32
gethostbyaddr
iphlpapi
GetAdaptersInfo
wtsapi32
WTSRegisterSessionNotification
oleacc
LresultFromObject
gdi32
DeleteDC
winspool.drv
OpenPrinterW
oleaut32
VariantClear
Sections
.text Size: 351KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 24B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE