Static task
static1
Behavioral task
behavioral1
Sample
5b973e6504e88c174a4c683b8d83a9221b063fa1fb794e2750cd36ebcba2378c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5b973e6504e88c174a4c683b8d83a9221b063fa1fb794e2750cd36ebcba2378c.exe
Resource
win10v2004-20220812-en
General
-
Target
5b973e6504e88c174a4c683b8d83a9221b063fa1fb794e2750cd36ebcba2378c
-
Size
177KB
-
MD5
1d82234b88aa0cda3695f36b943eb647
-
SHA1
781b532c97ac7e90555cb272d3eae9f914fc9613
-
SHA256
5b973e6504e88c174a4c683b8d83a9221b063fa1fb794e2750cd36ebcba2378c
-
SHA512
7d80956f0f8a0dc06948142bc1c37d43ff5d1d2446475ce07246545f2f4b2887af3785bb59fb81a323f048c84a87368646782a307c70be0dd8ecd0a80bb64c40
-
SSDEEP
3072:38Z/G4MhpabhLlDvVC5j6O7M0leLzt6aulE6DMyfIp1N/mbtZnyhIF+JZ:38Z/G4MhovVC5mO7flEzhAvMygp1lmH
Malware Config
Signatures
Files
-
5b973e6504e88c174a4c683b8d83a9221b063fa1fb794e2750cd36ebcba2378c.exe windows x86
2bca9d28cbf40dd6c6b8d638a1c60076
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
winspool.drv
ClosePrinter
kernel32
GetVersionExW
lstrcpyA
RemoveDirectoryW
lstrcmpiW
LoadLibraryA
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
shell32
ord201
ShellExecuteA
advapi32
RegQueryValueExW
RegOpenKeyExW
ElfOpenBackupEventLogA
RegSetValueExW
RegCreateKeyExW
RegCloseKey
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ