Static task
static1
Behavioral task
behavioral1
Sample
ba4cc68d8fdff7494b6ffde503979716c82040c42ec04b30917ab9a2a7a68075.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba4cc68d8fdff7494b6ffde503979716c82040c42ec04b30917ab9a2a7a68075.exe
Resource
win10v2004-20221111-en
General
-
Target
ba4cc68d8fdff7494b6ffde503979716c82040c42ec04b30917ab9a2a7a68075
-
Size
159KB
-
MD5
ec37b4ae93644aeda65270b94f1e8aae
-
SHA1
f112a32f683f36a22ba5814a25468328f53eecc0
-
SHA256
ba4cc68d8fdff7494b6ffde503979716c82040c42ec04b30917ab9a2a7a68075
-
SHA512
2e738a6c0b461155bca576aa487fbd5bdd74f6b9896971a992660908414bd75419fb72dfaec1bc9421ef8fecdf36df83d6ada0729a2c91ae3ba48b66d3b69b69
-
SSDEEP
3072:NFyyWotzGcUFHEz7J28XkaQY/1JpnN8C6hs/qzrH+H0CqH3hMr:NftzGcgcjkCJuCSE0CqHir
Malware Config
Signatures
Files
-
ba4cc68d8fdff7494b6ffde503979716c82040c42ec04b30917ab9a2a7a68075.exe windows x86
f4a03df0fbf120a0f3353d49d8816aa9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
winspool.drv
DocumentPropertiesW
kernel32
GetTickCount
lstrcpynW
DeleteCriticalSection
GlobalAlloc
CheckRemoteDebuggerPresent
lstrcpyW
FindClose
lstrcpyA
GlobalFree
EnumResourceTypesW
LockResource
GetACP
GetLastError
lstrlenW
WideCharToMultiByte
InitializeCriticalSection
lstrcmpiW
OutputDebugStringW
GetCPInfo
MultiByteToWideChar
GetModuleHandleW
user32
wsprintfW
GetMessageW
TranslateMessage
DispatchMessageW
GetAncestor
KillTimer
GetDC
CharNextW
PostThreadMessageW
CharUpperW
SetTimer
UnregisterClassA
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 980B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.isete Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ