Static task
static1
Behavioral task
behavioral1
Sample
c7d4567cbf8bc955f6915dbd04c7c7f0fde4fe685bfb566aef3b621753ebce7c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c7d4567cbf8bc955f6915dbd04c7c7f0fde4fe685bfb566aef3b621753ebce7c.exe
Resource
win10v2004-20221111-en
General
-
Target
c7d4567cbf8bc955f6915dbd04c7c7f0fde4fe685bfb566aef3b621753ebce7c
-
Size
276KB
-
MD5
0b147f2d8398d4155f03d0a8becc2740
-
SHA1
73d1751c59332d567898e05d7abc1d90d8431ea5
-
SHA256
c7d4567cbf8bc955f6915dbd04c7c7f0fde4fe685bfb566aef3b621753ebce7c
-
SHA512
b56df0f426caa55967bd80526e9afec53530aba492fdab1ff5b6198deddab79db31a1a04d827e4723db58cab760d96b1cdd5d4cb6cf7c7bbeb28252abe7b428f
-
SSDEEP
6144:Yps7DLP7hZeLT45ZoMIqVNVdqgQotpS0HQ0WrPUMYQS2j:0MPOKKMI0NVdqgQaCIMz
Malware Config
Signatures
Files
-
c7d4567cbf8bc955f6915dbd04c7c7f0fde4fe685bfb566aef3b621753ebce7c.exe windows x86
0c99511504e96cd16d41ba3cd7b9e73c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
UnregisterClassA
gdi32
DeleteDC
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
advapi32
RegSetValueExA
shlwapi
PathStripToRootA
oleaut32
VariantClear
wininet
HttpOpenRequestA
Sections
.text Size: 264KB - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE