Static task
static1
Behavioral task
behavioral1
Sample
92e26321d323cd624bac5ab39ba2a1ef24eb32af162a86859f6bbd502b9a6aca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
92e26321d323cd624bac5ab39ba2a1ef24eb32af162a86859f6bbd502b9a6aca.exe
Resource
win10v2004-20221111-en
General
-
Target
92e26321d323cd624bac5ab39ba2a1ef24eb32af162a86859f6bbd502b9a6aca
-
Size
164KB
-
MD5
efc9c394ae912ab23f93a98d42178eaf
-
SHA1
b16543a8d2f67418bbbb8c1d92379120182d2320
-
SHA256
92e26321d323cd624bac5ab39ba2a1ef24eb32af162a86859f6bbd502b9a6aca
-
SHA512
e05613f7d8dc6735291840fd58eecce45d6a849ad45e09c2845946e9609c81bfadf6a8bf8905fb6daf01fd176a2c0ea50a5684a33405d18285a27af70714426a
-
SSDEEP
3072:mcOFyVjVFNCeqcus8Qr4QTw/Y7Il6rE4jC+ivhU2aitawc:mc+y95qrs54Qz7Ilxr+iOj
Malware Config
Signatures
Files
-
92e26321d323cd624bac5ab39ba2a1ef24eb32af162a86859f6bbd502b9a6aca.exe windows x86
9bd24fe4dafab196024ec64b5f16ca78
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDiskFreeSpaceA
GetCurrentThreadId
RemoveDirectoryA
GetProfileStringW
lstrlenA
lstrcmpiA
CreateProcessA
winspool.drv
GetJobA
DocumentPropertiesA
OpenPrinterA
ClosePrinter
ws2_32
socket
getpeername
shutdown
setsockopt
sendto
getsockname
gethostbyname
htons
version
GetFileVersionInfoSizeA
VerQueryValueA
msvcrt
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
localtime
_onexit
atoi
strncmp
fclose
fread
fseek
fopen
memcmp
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ