Static task
static1
Behavioral task
behavioral1
Sample
1661426cd7034ab692c623a5d86184e850b873419ab5b4be645257702fb2c9dd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1661426cd7034ab692c623a5d86184e850b873419ab5b4be645257702fb2c9dd.exe
Resource
win10v2004-20220812-en
General
-
Target
1661426cd7034ab692c623a5d86184e850b873419ab5b4be645257702fb2c9dd
-
Size
3.3MB
-
MD5
50282ea644f076f59d0a5e272e24bf86
-
SHA1
2b71a3ee6144235153efa16d1e66162d43091dd9
-
SHA256
1661426cd7034ab692c623a5d86184e850b873419ab5b4be645257702fb2c9dd
-
SHA512
85a5ad72d13bdce2b5660a6bc5644270c464cf3e5825a4726d4f022645160818112bbc6d33f3ef2df629d6b7872f0260015f17afff1cb5273ec1285ba231fb23
-
SSDEEP
98304:ADb12XF2M6Tx0ivmKIIJpuF6ca8ljf+0Tpd97cl5:AIXotyOmKIapuF75fN/q
Malware Config
Signatures
Files
-
1661426cd7034ab692c623a5d86184e850b873419ab5b4be645257702fb2c9dd.exe windows x86
b6d8a9b92df3b7c6db291df4f6683f15
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutRestart
ws2_32
inet_ntoa
rasapi32
RasHangUpA
kernel32
TerminateThread
user32
CharNextA
gdi32
CombineRgn
msimg32
GradientFill
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
LookupPrivilegeValueA
shell32
SHGetPathFromIDListA
ole32
CoCreateInstance
oleaut32
RegisterTypeLi
comctl32
ImageList_DragLeave
oledlg
ord8
wininet
InternetCloseHandle
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 824KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ