Static task
static1
Behavioral task
behavioral1
Sample
d0891541a100ed44620fececdcec42afe92d5203b2d8384f230d4dc4f0a8948e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d0891541a100ed44620fececdcec42afe92d5203b2d8384f230d4dc4f0a8948e.exe
Resource
win10v2004-20221111-en
General
-
Target
d0891541a100ed44620fececdcec42afe92d5203b2d8384f230d4dc4f0a8948e
-
Size
553KB
-
MD5
c99da4780a8d367cbf06639425a59119
-
SHA1
d42105faf0e626dd74b2913455c0e9c12a4398f9
-
SHA256
d0891541a100ed44620fececdcec42afe92d5203b2d8384f230d4dc4f0a8948e
-
SHA512
a52161332300f2aafdfab2739fd2ae90401300c56012328ccccbff1846f91f46b62e0fa65a5de6ddcab7f554e408dc22a3e29da635c1b37d4a22d07f61237df6
-
SSDEEP
12288:nV3NRyqaE/D5Do2RInHV8BD8X5AL4Cuu28jmdE52ntgzF:npbD0HV8CX5ALL5ae52ntgz
Malware Config
Signatures
Files
-
d0891541a100ed44620fececdcec42afe92d5203b2d8384f230d4dc4f0a8948e.exe windows x86
7470dc7908fd3247780b3b1cd76c112e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
shlwapi
PathQuoteSpacesA
imagehlp
MakeSureDirectoryPathExists
user32
GetSysColorBrush
gdi32
RectVisible
comdlg32
GetOpenFileNameA
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
SHGetMalloc
comctl32
ord17
ole32
CoDisconnectObject
oleaut32
LoadTypeLi
Sections
.text Size: 542KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE