Static task
static1
Behavioral task
behavioral1
Sample
5b68055442cb183ffdfc4a4498952082eedf49f9ace6e470da3bd0c4398e1fc9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5b68055442cb183ffdfc4a4498952082eedf49f9ace6e470da3bd0c4398e1fc9.exe
Resource
win10v2004-20221111-en
General
-
Target
5b68055442cb183ffdfc4a4498952082eedf49f9ace6e470da3bd0c4398e1fc9
-
Size
1.0MB
-
MD5
0ca4f022807cf96ea9b44a67487c4125
-
SHA1
dba2f335bb0f59cf7871b0f3ada8d395ad14918b
-
SHA256
5b68055442cb183ffdfc4a4498952082eedf49f9ace6e470da3bd0c4398e1fc9
-
SHA512
b2cb27c074853044d23811517f0118af6b8786681779803ae850deac732487f2265c1e478b59438aa54d6de98e2d31df8cbf09205d7e72c1959d31289d1fc5c3
-
SSDEEP
24576:4qFKZbN6NTmYrC3PidAGHBYp63d7dV9Xc4Zucbm22uEFQ:54wmYvhYpk39XcWbmPRO
Malware Config
Signatures
Files
-
5b68055442cb183ffdfc4a4498952082eedf49f9ace6e470da3bd0c4398e1fc9.exe windows x86
92582a68ea14e1fc96ca4d4f833768c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
rasapi32
RasHangUpA
winmm
midiOutPrepareHeader
ws2_32
send
user32
CloseClipboard
gdi32
Escape
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
Shell_NotifyIconA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
wininet
InternetCanonicalizeUrlA
comdlg32
GetSaveFileNameA
Sections
.text Size: 1014KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE