Static task
static1
Behavioral task
behavioral1
Sample
b34b4c26a7e7a14eeea3e9bbafb23b6341ffbc217a368f4063e91eae8b866b3f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b34b4c26a7e7a14eeea3e9bbafb23b6341ffbc217a368f4063e91eae8b866b3f.exe
Resource
win10v2004-20221111-en
General
-
Target
b34b4c26a7e7a14eeea3e9bbafb23b6341ffbc217a368f4063e91eae8b866b3f
-
Size
33KB
-
MD5
db6c8152a9c4df2a05ca430b642ff6f1
-
SHA1
9d2efdc1936cb6790d2781e7ea0032991e8f05a4
-
SHA256
b34b4c26a7e7a14eeea3e9bbafb23b6341ffbc217a368f4063e91eae8b866b3f
-
SHA512
1e9a67fe6c7e99611b7a7435cfa088ab805480f313f2907cef1ac3421f6698207e042e4f7c8502552c540aa4327a07591a8c5e2c68233623a22df8284e67781c
-
SSDEEP
768:cpOkV+jJs1bLzMETnafohX5GtbGXiOJIPNp:c8kVeJ0/zManafCJwGsN
Malware Config
Signatures
Files
-
b34b4c26a7e7a14eeea3e9bbafb23b6341ffbc217a368f4063e91eae8b866b3f.exe windows x86
7e5719f8e88bb25d5312c23fb13ec5d4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
PageSetupDlgW
ChooseFontW
GetFileTitleW
GetOpenFileNameW
ReplaceTextW
GetSaveFileNameW
shell32
DragFinish
ShellAboutW
winspool.drv
GetPrinterDriverW
msvcrt
iswctype
_except_handler3
_snwprintf
__setusermatherr
_adjust_fdiv
__p__fmode
wcsncpy
advapi32
IsTextUnicode
kernel32
QueryPerformanceCounter
GetDateFormatW
GetTimeFormatW
GlobalUnlock
GetFileInformationByHandle
CreateFileMappingW
TerminateProcess
SetUnhandledExceptionFilter
LoadLibraryA
LocalFree
CompareStringW
CreateFileW
GetCurrentProcessId
GetCommandLineW
lstrcatW
lstrcmpW
MulDiv
LocalSize
WriteFile
SetLastError
WideCharToMultiByte
LocalReAlloc
FormatMessageW
GetUserDefaultUILanguage
DeleteFileW
UnmapViewOfFile
gdi32
DeleteDC
GetTextExtentPoint32W
SetAbortProc
GetTextFaceW
TextOutW
StartDocW
EnumFontsW
GetStockObject
GetDeviceCaps
DeleteObject
GetTextMetricsW
SetMapMode
user32
SetCursor
DefWindowProcW
DestroyWindow
ShowWindow
GetForegroundWindow
GetSystemMenu
LoadCursorW
CreateWindowExW
GetDesktopWindow
PostQuitMessage
UpdateWindow
CharLowerW
DrawTextExW
CreateDialogParamW
GetWindowTextW
GetSystemMetrics
WinHelpW
ChildWindowFromPoint
ScreenToClient
Sections
.idata Size: 14KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 60B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ