Static task
static1
Behavioral task
behavioral1
Sample
8bf3981d2eddb60596fdc8a5c28013b9c20641791391b97ef11cc507f959149b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8bf3981d2eddb60596fdc8a5c28013b9c20641791391b97ef11cc507f959149b.exe
Resource
win10v2004-20220901-en
General
-
Target
8bf3981d2eddb60596fdc8a5c28013b9c20641791391b97ef11cc507f959149b
-
Size
1.0MB
-
MD5
00bea834257e9e34e12bb99274f4f23d
-
SHA1
97dbf9402e0fcc93b70bfcd26d5e8967af5d5e81
-
SHA256
8bf3981d2eddb60596fdc8a5c28013b9c20641791391b97ef11cc507f959149b
-
SHA512
e48b0223b8c9087dc318a652c23dcf396aea25170ccb02a6e3f8cf016024758a7c5df20a99322d164b0e9e4238583a4c46abcdcb0add9fa4faa8bb1eb5ae87e1
-
SSDEEP
24576:zFNTQVoyxMq6ngtpvSUgKYxRo+/xdqYfI/rFX7FuuSntH:XTQueMq6ngpLgKeRoMM/rFXZuH
Malware Config
Signatures
Files
-
8bf3981d2eddb60596fdc8a5c28013b9c20641791391b97ef11cc507f959149b.exe windows x86
fe9409cde0186ace3eef69655ba3370f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegQueryValueExA
avifil32
AVISaveOptionsFree
comctl32
ImageList_SetIconSize
comdlg32
PrintDlgA
gdi32
UnrealizeObject
imm32
ImmGetVirtualKey
msvfw32
DrawDibRealize
ole32
CreateStreamOnHGlobal
oleaut32
SafeArrayPtrOfIndex
shell32
SHGetSpecialFolderLocation
user32
mouse_event
version
VerQueryValueA
winmm
waveOutGetNumDevs
winspool.drv
OpenPrinterA
Sections
CODE Size: 997KB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE