Static task
static1
Behavioral task
behavioral1
Sample
3a0469efba8301511c5c8479c42524e475552f3cf3d637c8617a2f5848e18cb2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3a0469efba8301511c5c8479c42524e475552f3cf3d637c8617a2f5848e18cb2.exe
Resource
win10v2004-20220812-en
General
-
Target
3a0469efba8301511c5c8479c42524e475552f3cf3d637c8617a2f5848e18cb2
-
Size
963KB
-
MD5
4ba5d71f9efc66a352d04471c1a4c8ce
-
SHA1
d755e7137f2149040ced6797bd48aa4a3517566a
-
SHA256
3a0469efba8301511c5c8479c42524e475552f3cf3d637c8617a2f5848e18cb2
-
SHA512
ca71459d4cc6d7d432f4ba237e326ecaee35bfd4fdb8108546ebe8d89e5f956c6bea7dfa6999ea7c49c7a7530f3ac686b52e73beebea44a03fe9204f9b8b8a66
-
SSDEEP
24576:Do9h/uGBZ7BjAzqf4Xn+dWav17ZT+WpCB1rrVKdbkwoGpNDt:DoNZ1jAzDn+drv1V+Wk/kdbiaf
Malware Config
Signatures
Files
-
3a0469efba8301511c5c8479c42524e475552f3cf3d637c8617a2f5848e18cb2.exe windows x86
1dcfe5caa6ed8dfc5fa8e72c61a4b0e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
rasapi32
RasHangUpA
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
user32
GetWindowTextA
gdi32
GetTextMetricsA
winspool.drv
DocumentPropertiesA
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
wininet
InternetCanonicalizeUrlA
comdlg32
GetSaveFileNameA
Sections
.text Size: 928KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE