Static task
static1
Behavioral task
behavioral1
Sample
d466085dccd73b1f79f302130d3337891945bd97e396dab21bc6c575354eb3d1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d466085dccd73b1f79f302130d3337891945bd97e396dab21bc6c575354eb3d1.exe
Resource
win10v2004-20220812-en
General
-
Target
d466085dccd73b1f79f302130d3337891945bd97e396dab21bc6c575354eb3d1
-
Size
4.3MB
-
MD5
ebf1cedb57916e7604a8913bfd55310f
-
SHA1
3692d970d12d8c2b7c5c5fbcc498068b3177f25b
-
SHA256
d466085dccd73b1f79f302130d3337891945bd97e396dab21bc6c575354eb3d1
-
SHA512
a7864eb12c246f4b32745e5fbb75ae873131fb8a59a3ce202f67e062297d82140b155e18375876eb7dd7a9027eeb3e5b535d5af382d9b6c06e46cfd03fbc7a1d
-
SSDEEP
98304:djf8BZS+HRsmzYjBOuuKN8mrADJnGL+aowlh0KuEY4DxmkhMIzaAJw/WbEoXARfC:djfEZ9YjBKKN8GVL+aowlh0KuEY4DxmU
Malware Config
Signatures
Files
-
d466085dccd73b1f79f302130d3337891945bd97e396dab21bc6c575354eb3d1.exe windows x86
06f0d826f076c306b8c34684eeb6f08d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
iphlpapi
GetAdaptersInfo
winmm
midiStreamRestart
ws2_32
WSAAsyncSelect
kernel32
WideCharToMultiByte
user32
GetWindowThreadProcessId
gdi32
ExtTextOutA
msimg32
GradientFill
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
SHGetSpecialFolderPathA
ole32
StgCreateDocfileOnILockBytes
oleaut32
SafeArrayGetElement
comctl32
_TrackMouseEvent
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
GetFileTitleA
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 2.7MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ