Static task
static1
Behavioral task
behavioral1
Sample
79df7b2ef5136de87de35cbc17fc3d05237c74aecbbd395832103b40408db3a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
79df7b2ef5136de87de35cbc17fc3d05237c74aecbbd395832103b40408db3a8.exe
Resource
win10v2004-20221111-en
General
-
Target
79df7b2ef5136de87de35cbc17fc3d05237c74aecbbd395832103b40408db3a8
-
Size
1.5MB
-
MD5
4cadfb1d30d9c8ef9c958b4fbf64d16b
-
SHA1
72341d98bcaf870cedb4ad41f00efa8f19a33de5
-
SHA256
79df7b2ef5136de87de35cbc17fc3d05237c74aecbbd395832103b40408db3a8
-
SHA512
f5f0ec62d0d1b10d9fcba9393ab6d71fbdc3858cef5aa78bbe6ac5e6d57ef707911c857065ab39667f052a394a0b7d1b4191a29a837028681fe8e59229e20f2a
-
SSDEEP
24576:3qrQg9BZ1IMRD/7OPwo5AoE48U7ZnMzSIaELr2wYE89QVE654wfHxEbq899vJ/qz:6rQg9Xaidv9U7ZnMeI1LrYfQ+6JZElZ6
Malware Config
Signatures
Files
-
79df7b2ef5136de87de35cbc17fc3d05237c74aecbbd395832103b40408db3a8.exe windows x86
d1d0ced9aa1ea10ad2ab2df35b2fe691
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
GetKeyboardType
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueW
ole32
CreateStreamOnHGlobal
comctl32
InitializeFlatSB
imm32
ImmSetCompositionWindow
wininet
HttpSendRequestExW
shell32
Shell_NotifyIconW
comdlg32
GetSaveFileNameW
winspool.drv
OpenPrinterW
iphlpapi
GetIfTable
wsock32
WSACleanup
msvcrt
_gcvt
winmm
PlaySoundW
Sections
.text Size: 1.4MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE