Static task
static1
Behavioral task
behavioral1
Sample
5176ab178d123bc5c07c5cd6bf0fafc3741768705037573fe70c6c57549effe4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5176ab178d123bc5c07c5cd6bf0fafc3741768705037573fe70c6c57549effe4.exe
Resource
win10v2004-20221111-en
General
-
Target
5176ab178d123bc5c07c5cd6bf0fafc3741768705037573fe70c6c57549effe4
-
Size
2.3MB
-
MD5
83008d0f28161452e45e0dbd7e190825
-
SHA1
0919f0600022b38e4d0ae2ec76be15910f1a01a3
-
SHA256
5176ab178d123bc5c07c5cd6bf0fafc3741768705037573fe70c6c57549effe4
-
SHA512
ace2a273c88332b945bab11e444500c67395021263cae4abce86970b989da048c284b8c2174558139e800cea30cc009d10c85f5b08727bfa114dc768a352d49a
-
SSDEEP
49152:o8nTXIhWX75S/1k3b7b4iusNNcfOvyByoOkjqWi05204YQsPZA6dw9mWrdL:xnhXda1knc1s5ygoZjpI04jAdwEmR
Malware Config
Signatures
Files
-
5176ab178d123bc5c07c5cd6bf0fafc3741768705037573fe70c6c57549effe4.exe windows x86
df180a7f0f50f8673f070fcfb12cb309
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetOpenEnumA
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
winspool.drv
OpenPrinterA
shell32
ShellExecuteExA
comdlg32
PrintDlgA
wsock32
WSACleanup
winmm
sndPlaySoundA
netapi32
Netbios
Sections
CODE Size: 2.2MB - Virtual size: 13.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE