Static task
static1
Behavioral task
behavioral1
Sample
a3a2be4ac5c42713d6a1b4d4041220ccf5bcb051774b6b1bc8526c57ec6f2e11.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a3a2be4ac5c42713d6a1b4d4041220ccf5bcb051774b6b1bc8526c57ec6f2e11.exe
Resource
win10v2004-20220812-en
General
-
Target
a3a2be4ac5c42713d6a1b4d4041220ccf5bcb051774b6b1bc8526c57ec6f2e11
-
Size
686KB
-
MD5
85eed8e5bfe6962735e91ef75ee05dea
-
SHA1
309f2cb373397dec3ce772d206cea44ca14c4f3c
-
SHA256
a3a2be4ac5c42713d6a1b4d4041220ccf5bcb051774b6b1bc8526c57ec6f2e11
-
SHA512
279899fbb792f94be351d7648a4b60a70da756de82ea093744e2baf79c6a4f37165033ef704e7b8aade1262e9d3c36083f4843dba10cac2c3e03ada5d12fb28d
-
SSDEEP
12288:rSzN0OcwZX8G2GLBTpbRrJQzHI5sUnrGqI+HK6Ro/UKd8IUAqTEYbMWm:K0OcwVRppdlqzWsPqFKWo/UY89NBV
Malware Config
Signatures
Files
-
a3a2be4ac5c42713d6a1b4d4041220ccf5bcb051774b6b1bc8526c57ec6f2e11.exe windows x64
92a3dc2376bf50818b9da1983106436a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetDC
gdi32
BitBlt
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
DragFinish
comctl32
ImageList_GetIconSize
shlwapi
PathIsUNCA
ole32
DoDragDrop
oleaut32
SysStringLen
oleacc
LresultFromObject
gdiplus
GdipFree
imm32
ImmGetContext
winmm
PlaySoundA
Sections
.MPRESS1 Size: 675KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE