Static task
static1
Behavioral task
behavioral1
Sample
a256363737e246a9a602d83b9ec533507e089636b676ad2bd7f09f38b96502d1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a256363737e246a9a602d83b9ec533507e089636b676ad2bd7f09f38b96502d1.exe
Resource
win10v2004-20221111-en
General
-
Target
a256363737e246a9a602d83b9ec533507e089636b676ad2bd7f09f38b96502d1
-
Size
340KB
-
MD5
98043b27ad2dd5f80ac5f3b825c0dd95
-
SHA1
34cd2e947ab172a7f64cee9814ffed4cbd750fea
-
SHA256
a256363737e246a9a602d83b9ec533507e089636b676ad2bd7f09f38b96502d1
-
SHA512
ea1629ce7a8dda314a6c487a35a65ed9d15dc0d1e884bd6721524b5e45ce8567bfe32e4b84ddd329fe59f82369a9a0e32592118dbd4b83c9b5f88ccccd9dd024
-
SSDEEP
6144:tSXL0VtXApA6hZGNCt83I6cxKroZrTufff8L6y+NAK461j8Wx0x:tSXqwpA6hZGNY846cRrTknax+NAgPx
Malware Config
Signatures
Files
-
a256363737e246a9a602d83b9ec533507e089636b676ad2bd7f09f38b96502d1.exe windows x86
683390701b4a5aceda1644c0ca6650f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
avicap32
capCreateCaptureWindowA
comctl32
ImageList_Add
gdi32
BitBlt
ole32
IsEqualGUID
oleaut32
SysStringLen
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
user32
GetDC
winmm
timeGetTime
winspool.drv
ClosePrinter
ws2_32
WSACloseEvent
wsock32
bind
Sections
.MPRESS1 Size: 332KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE