Static task
static1
Behavioral task
behavioral1
Sample
809a93ae792c229fd939b354f27e2a5084fb0d71755e0ef6a9e30cf669c3db5c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
809a93ae792c229fd939b354f27e2a5084fb0d71755e0ef6a9e30cf669c3db5c.exe
Resource
win10v2004-20220812-en
General
-
Target
809a93ae792c229fd939b354f27e2a5084fb0d71755e0ef6a9e30cf669c3db5c
-
Size
272KB
-
MD5
b2c14e6ef25a849d71c131ae9824ea8b
-
SHA1
2e8ae384760308159fb11df8eb82d6e78b618410
-
SHA256
809a93ae792c229fd939b354f27e2a5084fb0d71755e0ef6a9e30cf669c3db5c
-
SHA512
3ade0d254191ae888c93192ad65ab3659bab6924ca51ac10a9c763eac6ac0d126c347b79d3cd2edd110bd0c7a9def39f58cfff8587f6f0f9111f9d153f3bec72
-
SSDEEP
6144:9AUUIr3K6jp47XFefK/nf5smnk1deBo1ubnKkHtsRPYRmavCo:9Ak6Ap4BefGnf5smnknIo1ubKItMP4
Malware Config
Signatures
Files
-
809a93ae792c229fd939b354f27e2a5084fb0d71755e0ef6a9e30cf669c3db5c.exe windows x86
40f37d20f9f8c1b20efb9ea0d3338654
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleRegGetUserType
StgCreateDocfileOnILockBytes
CreateOleAdviseHolder
CoRevokeClassObject
CoDisconnectObject
CoTaskMemFree
kernel32
LoadLibraryA
LoadLibraryExA
IsBadReadPtr
GetModuleHandleW
GetACP
lstrlenW
ExitProcess
GetModuleHandleA
VirtualAllocEx
GetCommandLineW
GetProcAddress
GetCommandLineA
comdlg32
ChooseColorA
FindTextA
GetOpenFileNameA
GetFileTitleA
Sections
CODE Size: 236KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ