Static task
static1
Behavioral task
behavioral1
Sample
631b5c978ea710d54cae179b6f1d269f6e3301c4dafde37ed98899f31d09392b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
631b5c978ea710d54cae179b6f1d269f6e3301c4dafde37ed98899f31d09392b.exe
Resource
win10v2004-20220901-en
General
-
Target
631b5c978ea710d54cae179b6f1d269f6e3301c4dafde37ed98899f31d09392b
-
Size
2.0MB
-
MD5
a309683e6f21f04a27756ecd3b92f176
-
SHA1
36f9f0923eb7904d2c6dafb98319e0447de29721
-
SHA256
631b5c978ea710d54cae179b6f1d269f6e3301c4dafde37ed98899f31d09392b
-
SHA512
a94c8e332dd9f87bd1b69c900f4b384396630e92105e40b7c8774672457a3d968a218edb46c9ca792a7626855138e113dfd81e97efa858cb306540213c9da482
-
SSDEEP
49152:UTo8WSi8/0WWWCVISvIUo9I9lqPhf8EIBc/LPQOwrmzb7:U6v8/sWiISIUaZprDQFmzX
Malware Config
Signatures
Files
-
631b5c978ea710d54cae179b6f1d269f6e3301c4dafde37ed98899f31d09392b.exe windows x86
539f3837c7fa63954d1db9dc8f4d1747
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileA
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
user32
GetClipboardData
gdi32
OffsetViewportOrgEx
winmm
midiStreamClose
winspool.drv
OpenPrinterA
advapi32
RegCreateKeyA
shell32
Shell_NotifyIconA
ole32
CoRevokeClassObject
oleaut32
SysAllocStringByteLen
comctl32
ImageList_GetIcon
oledlg
ord8
ws2_32
WSACleanup
comdlg32
GetFileTitleA
Sections
.text Size: - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 922KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dat0 Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.dat1 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dat2 Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ