Static task
static1
Behavioral task
behavioral1
Sample
f03eb99fa141ff52f4293244fab138a1850ca363679c152f6e7d5497395a7429.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f03eb99fa141ff52f4293244fab138a1850ca363679c152f6e7d5497395a7429.exe
Resource
win10v2004-20220901-en
General
-
Target
f03eb99fa141ff52f4293244fab138a1850ca363679c152f6e7d5497395a7429
-
Size
3.5MB
-
MD5
94a6ad5942f8440729d6f8317cfa7ad3
-
SHA1
4e6b37c63ec5b5c32b949c4dadb370ae14374944
-
SHA256
f03eb99fa141ff52f4293244fab138a1850ca363679c152f6e7d5497395a7429
-
SHA512
d4b9e760700ce549b800c7fdeba4ab8fae2a9591b832bca932d38d76c20a5636e52ea90fe1777a82c293ed3e6482f4dfc16583387367b5be66bec52f3e9ca776
-
SSDEEP
49152:XQMOMXu1yHgQl11ufTyn6HhWl4cIy9aC3l95clsxtDEzhTgX/IJzqIm/pWvrlz2u:AMf9aGnUWCcPa059xMaJ5RWvkwLs+6V
Malware Config
Signatures
Files
-
f03eb99fa141ff52f4293244fab138a1850ca363679c152f6e7d5497395a7429.exe windows x86
ebf4f442502193cd2ed450961ad35169
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
SaveDC
ole32
OleDraw
comctl32
ImageList_Add
shell32
ShellExecuteA
wsock32
WSACleanup
Sections
.MPRESS1 Size: 3.5MB - Virtual size: 31.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE