Static task
static1
Behavioral task
behavioral1
Sample
a463916a509b27a7cda3990ba8487e6bd70c8b2b3fc6f6ba047ebc97af39f6bd.exe
Resource
win7-20221111-en
General
-
Target
a463916a509b27a7cda3990ba8487e6bd70c8b2b3fc6f6ba047ebc97af39f6bd
-
Size
276KB
-
MD5
d335ecbcbbceae9501b7889e9d46521e
-
SHA1
6a1cdea27b4b74213ab797aabe16878f8dce345e
-
SHA256
a463916a509b27a7cda3990ba8487e6bd70c8b2b3fc6f6ba047ebc97af39f6bd
-
SHA512
ba7246aa512fb96f510136917247fd58861f1e2688fbe265f351f0d4498b7da4d25f71136db89960b2087f72da9375de09dda65b6bdc322eaaaca472ed1e660e
-
SSDEEP
6144:54D1sTKODAGmVyyzCwbGmHCY9iITyZbbnEahv:5s1sFDSOA7iYyZbbb
Malware Config
Signatures
Files
-
a463916a509b27a7cda3990ba8487e6bd70c8b2b3fc6f6ba047ebc97af39f6bd.exe windows x86
05a956f0c5fe1b109c08b0e97d8ec0c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
GlobalAddAtomA
SetFilePointer
WriteFile
GetOEMCP
HeapFree
ExitProcess
FlushFileBuffers
HeapAlloc
GetSystemInfo
EnumResourceNamesW
GetCurrentProcess
GetLongPathNameA
SetEndOfFile
VirtualProtect
VirtualQuery
RtlUnwind
ReadFile
FindAtomW
comdlg32
ChooseFontA
GetOpenFileNameA
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
ole32
CoTaskMemFree
CLSIDFromString
CoCreateInstance
StgCreateDocfile
Sections
.text Size: 136KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ