Static task
static1
Behavioral task
behavioral1
Sample
930af4ca1624ad39fb61c998977737dc6c7046cfa33454bba8e5d279c3e11b76.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
930af4ca1624ad39fb61c998977737dc6c7046cfa33454bba8e5d279c3e11b76.exe
Resource
win10v2004-20220812-en
General
-
Target
930af4ca1624ad39fb61c998977737dc6c7046cfa33454bba8e5d279c3e11b76
-
Size
4.7MB
-
MD5
8f86e07ab745bae73c0bb3d3817814d2
-
SHA1
84c2d5682e1dea3336d7cce13a2157ea30ffac8d
-
SHA256
930af4ca1624ad39fb61c998977737dc6c7046cfa33454bba8e5d279c3e11b76
-
SHA512
b6f5b0a43f7c5b9c8225289d57f7fafa3142a95c6565ee8c3de892de8d0086c3e820540d468dbe064e960cd53eb37b6ad1e2ea0ca0f6a3111cf8f469187ddfa2
-
SSDEEP
49152:GdhE4CC3SygCCAabuA/pyIW0Y0TXeg+qfw2Uxp6XBNeWprzQ8NylbbZmvuX8MdG5:GVVgCjYYrglfw2qpoh74/Zf5wuw6+cu
Malware Config
Signatures
Files
-
930af4ca1624ad39fb61c998977737dc6c7046cfa33454bba8e5d279c3e11b76.exe windows x86
db04412a59d78a4aadbbb0425469cb9d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
sndPlaySoundA
msimg32
AlphaBlend
user32
GetWindowThreadProcessId
gdi32
PolylineTo
comdlg32
CommDlgExtendedError
winspool.drv
ClosePrinter
advapi32
AdjustTokenPrivileges
shell32
SHGetFileInfoA
comctl32
_TrackMouseEvent
oledlg
ord3
ole32
GetClassFile
olepro32
ord253
oleaut32
VariantClear
Sections
.text Size: 4.6MB - Virtual size: 10.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE