Static task
static1
Behavioral task
behavioral1
Sample
f483756e8597bed228bf635773e17bb0128f83d6b44f1886251ad61214b5fa4b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f483756e8597bed228bf635773e17bb0128f83d6b44f1886251ad61214b5fa4b.exe
Resource
win10v2004-20220812-en
General
-
Target
f483756e8597bed228bf635773e17bb0128f83d6b44f1886251ad61214b5fa4b
-
Size
2.9MB
-
MD5
e3f5db3b8c84350a1159d7cfb7d88b18
-
SHA1
36ab827f4201ee746272063952c3439037e88a13
-
SHA256
f483756e8597bed228bf635773e17bb0128f83d6b44f1886251ad61214b5fa4b
-
SHA512
5d57da6168b0679fd996ba5294149a997b5e48366d6ea8c8a94e18af47ca2c5e07b2ea7f10d2c88d674d230bbeb93f91614230d701976f2fd1e9b124c9912e5a
-
SSDEEP
49152:dFcfGlI/ZXGsS6XJ1m5Bdw5JlII5+PUiG7N0NWTaPVTXjIZg1GGGhoKvnidjEHE1:dSGlI/NGsS6XJU5Bd25idG7N0sWPVHSa
Malware Config
Signatures
Files
-
f483756e8597bed228bf635773e17bb0128f83d6b44f1886251ad61214b5fa4b.exe windows x86
67908ec15f9cfcbc1624dde05cc10851
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutOpen
ws2_32
htons
kernel32
TerminateThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CheckMenuItem
gdi32
SetBkColor
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
LoadTypeLi
comctl32
ord17
comdlg32
ChooseFontA
Sections
CODE Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tybb0 Size: 56KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tybb1 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tybb2 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ