Static task
static1
Behavioral task
behavioral1
Sample
25f98c18b82fb30d1bd3f20281b865933b2c350ecb90fb4eab9b482b2ca819b1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
25f98c18b82fb30d1bd3f20281b865933b2c350ecb90fb4eab9b482b2ca819b1.exe
Resource
win10v2004-20220812-en
General
-
Target
25f98c18b82fb30d1bd3f20281b865933b2c350ecb90fb4eab9b482b2ca819b1
-
Size
2.9MB
-
MD5
b1106e7c06d26fd9efb22fddfbd9588c
-
SHA1
bfd2017f484e64e1815897dd3d07a69eb4aadd29
-
SHA256
25f98c18b82fb30d1bd3f20281b865933b2c350ecb90fb4eab9b482b2ca819b1
-
SHA512
bb51ed73844f0863c232eced883f2d17d4647015d583cf0befb18cc00b555ae88a4d9cb2b8519626d456066b0faed06c314631896bfa232230636eacf6f72901
-
SSDEEP
49152:T15pMffk6VzizBObLBbBVnd9bT+bux6R0/owzOIU8SRa8SfXS2zvzZfJ2XOWoUNh:TQTAzwBdV/y50wwq8SWf9vlU+rUbq3Qj
Malware Config
Signatures
Files
-
25f98c18b82fb30d1bd3f20281b865933b2c350ecb90fb4eab9b482b2ca819b1.exe windows x86
1685ee2fc0a6df680374287a1544ac83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetGetLastErrorA
version
VerQueryValueA
gdi32
UnrealizeObject
msimg32
TransparentBlt
ole32
IsEqualGUID
comctl32
ImageList_SetIconSize
imm32
ImmGetOpenStatus
winspool.drv
OpenPrinterA
shell32
Shell_NotifyIconA
wininet
HttpSendRequestExA
comdlg32
PageSetupDlgA
oledlg
OleUIObjectPropertiesA
wsock32
WSACleanup
winpplb
B_GetUSBDeviceInfo
winmm
PlaySoundA
Sections
CODE Size: 2.9MB - Virtual size: 20.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE