Static task
static1
Behavioral task
behavioral1
Sample
f2f166f2a3404010235cafb3eef39bbc7199eaf54968466064bc3f77a54eab64.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f2f166f2a3404010235cafb3eef39bbc7199eaf54968466064bc3f77a54eab64.exe
Resource
win10v2004-20220812-en
General
-
Target
f2f166f2a3404010235cafb3eef39bbc7199eaf54968466064bc3f77a54eab64
-
Size
403KB
-
MD5
2bc04fdd238bf09b3e44bac94ba61cc9
-
SHA1
e6ccccf32f527b4912f3a503a3bd441e59a074a1
-
SHA256
f2f166f2a3404010235cafb3eef39bbc7199eaf54968466064bc3f77a54eab64
-
SHA512
f659c42d8c2928cb2185bf201c228623e0e0aff14aa7ea5a81f446400d977d56fc6a369d1478d4be100d166f863597b53b40967959ca0bc80124b13424ad833f
-
SSDEEP
12288:sGufhRjy+xt6qYdX7XTvWP8+7wa9AErFQDn:sGufhRj5v0J7jOPR00T
Malware Config
Signatures
Files
-
f2f166f2a3404010235cafb3eef39bbc7199eaf54968466064bc3f77a54eab64.exe windows x86
df7eb56f36f9740aa5fb67573a389392
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueW
ole32
OleUninitialize
comctl32
InitializeFlatSB
urlmon
URLDownloadToFileW
winspool.drv
OpenPrinterW
Sections
.text Size: 392KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE