Static task
static1
Behavioral task
behavioral1
Sample
373f34dcfdd8b4ff2a9948b08a7f10535575f4c05423119dd05c354b5e2b8f7e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
373f34dcfdd8b4ff2a9948b08a7f10535575f4c05423119dd05c354b5e2b8f7e.exe
Resource
win10v2004-20221111-en
General
-
Target
373f34dcfdd8b4ff2a9948b08a7f10535575f4c05423119dd05c354b5e2b8f7e
-
Size
58KB
-
MD5
1e994e9030f8ed39de86d8231a43100c
-
SHA1
9f22e0ed6108a3664f5fcb40ba294ef073f02f2a
-
SHA256
373f34dcfdd8b4ff2a9948b08a7f10535575f4c05423119dd05c354b5e2b8f7e
-
SHA512
cf6fedf7a11022ea1319878969975df5a1fc3862b831f317cd37c9304cc4c36598c5e046a1040ee67d2bfd51c8057bf20b9ee6969a17c7c62a260a875b01b274
-
SSDEEP
1536:OnjQNQyQv+eQG0Fao67/uyH14Y5arB0k0+EHSnSnEXau:Onjr+eYu/uc4sMe3OXa
Malware Config
Signatures
Files
-
373f34dcfdd8b4ff2a9948b08a7f10535575f4c05423119dd05c354b5e2b8f7e.exe windows x86
764456a24e303148d33ce960e675550f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidCodePage
GetLogicalDrives
SuspendThread
EndUpdateResourceW
GetStdHandle
lstrcmpiA
HeapCreate
lstrcmpiA
FileTimeToLocalFileTime
GetBinaryTypeW
lstrcmpiA
SetLastError
CreateWaitableTimerW
lstrlenA
Sleep
CreateNamedPipeA
GetModuleHandleA
lstrcmpiA
GetProcessHeap
GetModuleFileNameA
GetExitCodeProcess
GetDriveTypeA
lstrcmpiA
printui
PnPInterface
ConstructPrinterFriendlyName
bPrinterSetup
bFolderRefresh
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xml Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE