Static task
static1
Behavioral task
behavioral1
Sample
4091e38bfd0435a13911d56eb68c8c7dd800e8810277d7e72e9d7d1831f5dbf3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4091e38bfd0435a13911d56eb68c8c7dd800e8810277d7e72e9d7d1831f5dbf3.exe
Resource
win10v2004-20221111-en
General
-
Target
4091e38bfd0435a13911d56eb68c8c7dd800e8810277d7e72e9d7d1831f5dbf3
-
Size
461KB
-
MD5
004ac80d35d816725a226f22a49979bc
-
SHA1
1e4d4e381c775bbd76cf503cff8e1027a733eabf
-
SHA256
4091e38bfd0435a13911d56eb68c8c7dd800e8810277d7e72e9d7d1831f5dbf3
-
SHA512
d02571cf055d37ec12cccad303314dce66dfec231f427bc2b7e6e169fa56cc8bd06fd1ce391423237893bb528166859ae3211d58890551fbeee476b0be83b0cc
-
SSDEEP
12288:RVO7GJoxBttGQV+SzISsKO9wxuUGB2LU:RE6OPtZVxzISlO9/K
Malware Config
Signatures
Files
-
4091e38bfd0435a13911d56eb68c8c7dd800e8810277d7e72e9d7d1831f5dbf3.exe windows x86
a61fc350e6651d1760bed5a22398e877
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueW
ole32
OleUninitialize
comctl32
InitializeFlatSB
shell32
SHFileOperationW
comdlg32
GetSaveFileNameW
winspool.drv
OpenPrinterW
Sections
.text Size: 418KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE