Static task
static1
Behavioral task
behavioral1
Sample
d11069f7643389f81b920f568e3aefac3ea7585a06c413d6a4e847ce3d612490.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d11069f7643389f81b920f568e3aefac3ea7585a06c413d6a4e847ce3d612490.exe
Resource
win10v2004-20220812-en
General
-
Target
d11069f7643389f81b920f568e3aefac3ea7585a06c413d6a4e847ce3d612490
-
Size
1.3MB
-
MD5
56d3d53637eb75b8bb2080d1930cdde4
-
SHA1
7a3d168bc9069bd736d6b27d0597cb40bc75a85a
-
SHA256
d11069f7643389f81b920f568e3aefac3ea7585a06c413d6a4e847ce3d612490
-
SHA512
b5dd69ef1c744f755df727e006111dddfad43775abec7b15c4e2dec6832f4cdde86478f92efc23dd40af6260444dd1a3cc9ea87d78c81b0deefe8b59455e0ba0
-
SSDEEP
24576:qS+wH3DTW9kw8UNdAv1sQiAJBYIiwPfi30J5Xj67bYfpE53:qgm9lIRlJZiwC3SBWbY25
Malware Config
Signatures
Files
-
d11069f7643389f81b920f568e3aefac3ea7585a06c413d6a4e847ce3d612490.exe windows x86
7ce659e7841c0b6ab204edcf761a4137
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegCloseKey
version
GetFileVersionInfoA
winspool.drv
ClosePrinter
comctl32
ImageList_Add
comdlg32
CommDlgExtendedError
gdi32
AbortDoc
shell32
SHAppBarMessage
user32
ActivateKeyboardLayout
winmm
sndPlaySoundA
imm32
ImmGetCompositionStringW
ole32
CLSIDFromProgID
oleaut32
GetActiveObject
oleacc
LresultFromObject
cadio
@CCanvas@$bdtr$qqsv
lilymath
@CLilyApi@GetInfo$qqsp14STCrypt_Server
lilycommon
@CLiLyCommonCfg@Destroy$qqsv
gdiplus
GdiplusStartup
shlwapi
PathIsRootA
libsocket
MSK_AddClientConn
Sections
.text Size: 1.3MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE