Static task
static1
Behavioral task
behavioral1
Sample
ad31c3d8338bb7aac85b7a19b10f197ddd812723b0c0a635ebfa84fee5a89135.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ad31c3d8338bb7aac85b7a19b10f197ddd812723b0c0a635ebfa84fee5a89135.exe
Resource
win10v2004-20220812-en
General
-
Target
ad31c3d8338bb7aac85b7a19b10f197ddd812723b0c0a635ebfa84fee5a89135
-
Size
663KB
-
MD5
672ad5e33873573f6c5e726ce124c795
-
SHA1
7768b0267557165524045eb928054827b7408abd
-
SHA256
ad31c3d8338bb7aac85b7a19b10f197ddd812723b0c0a635ebfa84fee5a89135
-
SHA512
ef427905fb29f141103d5a3bd90e19b9844e2b3209f2a7c6efb04d8cb6463eda52fdfcef1afe8e9821edc6492042f703ac33be08feeb369e329e83e41e25804d
-
SSDEEP
12288:9QUoe5W5zHXNP9u3jLVZwIhGUTcktnWfKHLPDC/PA6DTEypGHNu4vEU:9geGH9k3TVTpWfiLOHRqI4z
Malware Config
Signatures
Files
-
ad31c3d8338bb7aac85b7a19b10f197ddd812723b0c0a635ebfa84fee5a89135.exe windows x86
cc82514d1adf72027a41d68e37c04738
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetDC
gdi32
PatBlt
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
advapi32
RegEnumKeyA
shell32
DragFinish
comctl32
InitCommonControlsEx
shlwapi
PathIsUNCA
oledlg
ord8
ole32
DoDragDrop
oleaut32
SysAllocString
gdiplus
GdipFree
winmm
PlaySoundA
ws2_32
gethostbyname
wininet
FindCloseUrlCache
imm32
ImmGetContext
Sections
.MPRESS1 Size: 586KB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE