Static task
static1
Behavioral task
behavioral1
Sample
74861b0d8ba2b21b99a577916a68c18bd06536af76212c4ba54c6b069ebae61a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
74861b0d8ba2b21b99a577916a68c18bd06536af76212c4ba54c6b069ebae61a.exe
Resource
win10v2004-20221111-en
General
-
Target
74861b0d8ba2b21b99a577916a68c18bd06536af76212c4ba54c6b069ebae61a
-
Size
5.4MB
-
MD5
c55d987d8cd6050e9f11f7fe2e69bc68
-
SHA1
2e4c7bb36850ffe1ad05587bfd8b1ceb3513668c
-
SHA256
74861b0d8ba2b21b99a577916a68c18bd06536af76212c4ba54c6b069ebae61a
-
SHA512
3b64e98407f72f3b84aa2bde75ea1cc97ebe6445b05786bc7e3f34f54db549f0f29eb79913a94535de1d059a10d39d368174dbc871742a94ecd7446ab430fcdc
-
SSDEEP
98304:lCsFeuxhaz4s2N8TBkMeTPqpc8d+Yajk8pMW59b33Ksk2TzOWr0h:YsFJSz45QETPMc8d+HBllTz
Malware Config
Signatures
Files
-
74861b0d8ba2b21b99a577916a68c18bd06536af76212c4ba54c6b069ebae61a.exe windows x86
127e130a0c2ee12eae2956c9d40a9e5a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetGetConnectionA
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
IsEqualGUID
comctl32
ImageList_SetIconSize
winspool.drv
OpenPrinterA
shell32
Shell_NotifyIconA
comdlg32
PageSetupDlgA
winmm
sndPlaySoundA
pquery.bin
WyQueryPYWhole
Sections
CODE Size: 5.3MB - Virtual size: 26.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE