Static task
static1
Behavioral task
behavioral1
Sample
b4b397a90cebd259ea6022ca1f59acd4f59063cad999c9b8f3978850d1d50966.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b4b397a90cebd259ea6022ca1f59acd4f59063cad999c9b8f3978850d1d50966.exe
Resource
win10v2004-20220812-en
General
-
Target
b4b397a90cebd259ea6022ca1f59acd4f59063cad999c9b8f3978850d1d50966
-
Size
1007KB
-
MD5
1cd22bde549cdf7fae3e666cdef142bc
-
SHA1
9a588824f7bbcf700c1d83fb027a721b8f08886b
-
SHA256
b4b397a90cebd259ea6022ca1f59acd4f59063cad999c9b8f3978850d1d50966
-
SHA512
9f91296f16c5c2d51fbc222a09027d0e56e38e99e554a2711de67a3a979bf2030c9097534e9d9c5883da8923ed16daa10431afb91eec0a65b668cc306e0c70e8
-
SSDEEP
24576:OeeSlSySdrEuec/XqXOXJINw3Vy1eij8RxX7SKrSS9b4LcWIv:O2wySRfecSXOZB3YIij8R1SKrMd
Malware Config
Signatures
Files
-
b4b397a90cebd259ea6022ca1f59acd4f59063cad999c9b8f3978850d1d50966.exe windows x86
522c1ea9bc4f0409a99b916ba3991258
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegCloseKey
user32
GetCursorPos
gdi32
SelectObject
shell32
SHGetSpecialFolderLocation
ole32
CoRegisterMessageFilter
ws2_32
WSCEnumProtocols
wininet
InternetCloseHandle
msimg32
GradientFill
comctl32
ImageList_ReplaceIcon
shlwapi
SHDeleteEmptyKeyW
oleaut32
VariantChangeType
wsock32
WSAGetLastError
iphlpapi
IpRenewAddress
winspool.drv
ClosePrinter
Sections
.text Size: 968KB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE