Static task
static1
Behavioral task
behavioral1
Sample
4785359d9c1bc5443308cb13c9e5a5b81a509667b162283e2d9d7bc8a2c4325d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4785359d9c1bc5443308cb13c9e5a5b81a509667b162283e2d9d7bc8a2c4325d.exe
Resource
win10v2004-20221111-en
General
-
Target
4785359d9c1bc5443308cb13c9e5a5b81a509667b162283e2d9d7bc8a2c4325d
-
Size
661KB
-
MD5
1697ee9881bb8a9a89f43c5b033e10b0
-
SHA1
7febc49e6ee2883908ec3fa954ce341f22457702
-
SHA256
4785359d9c1bc5443308cb13c9e5a5b81a509667b162283e2d9d7bc8a2c4325d
-
SHA512
5b619853ba903c5fae5fc60f71ac4d67ec7cc6a06f7f16421806766010c0f553b80d3c3b1efb16c1cfc03e37dfbcc39d1ff6011f0948987f5d192a72455f13a9
-
SSDEEP
12288:16i74BvjknwLdIG5OZoeOkppBQxS0MbDIbCfYBs3hJdl5sID6y9/EyRgKkN:1t74ZjknWEZdBppuRMPICw+3hjPPlyYg
Malware Config
Signatures
Files
-
4785359d9c1bc5443308cb13c9e5a5b81a509667b162283e2d9d7bc8a2c4325d.exe windows x86
86aa4df877a243c664104b2cab9c6b61
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueW
mpr
WNetGetConnectionW
ole32
CreateStreamOnHGlobal
comctl32
InitializeFlatSB
shell32
SHGetSpecialFolderLocation
comdlg32
GetOpenFileNameW
winspool.drv
OpenPrinterW
netapi32
Netbios
oleacc
ObjectFromLresult
Sections
.text Size: 648KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE