Static task
static1
Behavioral task
behavioral1
Sample
c197c1686c610838fa4404bf05fc6a83d6369ca4d0bef6356c0ec865c1e2b8bf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c197c1686c610838fa4404bf05fc6a83d6369ca4d0bef6356c0ec865c1e2b8bf.exe
Resource
win10v2004-20220812-en
General
-
Target
c197c1686c610838fa4404bf05fc6a83d6369ca4d0bef6356c0ec865c1e2b8bf
-
Size
169KB
-
MD5
ca1f0b646dd21f33574432403cd96fd6
-
SHA1
71ced2b519b41a1da16e9601358436057c4c16dc
-
SHA256
c197c1686c610838fa4404bf05fc6a83d6369ca4d0bef6356c0ec865c1e2b8bf
-
SHA512
702ce3ae8dd0bb6d8a843a4ab6c68647a00d4293368c0ad8bf96086a3f53b21f5f07bccb16598412d1b38f0ee1a19497d72dfa576c7171e6530e85ade6a0b4a3
-
SSDEEP
3072:vvpLoPKOrae+z5JoO1aB1at56Pdc6Ch6UzmVJGkPHS76bZPpUupNGyowUw:vvpLCKUae+9T1aB1ateu6OCQkPHS76bZ
Malware Config
Signatures
Files
-
c197c1686c610838fa4404bf05fc6a83d6369ca4d0bef6356c0ec865c1e2b8bf.exe windows x86
279db22e3360b70d09d953a263445e76
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
GetSystemInfo
FlushFileBuffers
GetCurrentProcess
RtlUnwind
VirtualProtect
HeapFree
VirtualQuery
ExitProcess
ReadFile
EnumResourceNamesW
GetVolumeInformationA
GetOEMCP
WriteFile
HeapAlloc
SetFilePointer
SetEndOfFile
FindAtomW
comdlg32
ChooseFontA
GetOpenFileNameA
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
ole32
CLSIDFromString
CoCreateInstance
CoTaskMemFree
StgCreateDocfile
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
Sections
.text Size: 89KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ