Static task
static1
Behavioral task
behavioral1
Sample
4d509ba35f83646cde1a6ac312a0e748ab982a3409b71fa7890c891b99d16d99.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4d509ba35f83646cde1a6ac312a0e748ab982a3409b71fa7890c891b99d16d99.exe
Resource
win10v2004-20220812-en
General
-
Target
4d509ba35f83646cde1a6ac312a0e748ab982a3409b71fa7890c891b99d16d99
-
Size
1.1MB
-
MD5
e5889d0ac5aae286425f50773886620a
-
SHA1
ac76a0258c3bd40e38b9354f7c8132c77c0b8dc1
-
SHA256
4d509ba35f83646cde1a6ac312a0e748ab982a3409b71fa7890c891b99d16d99
-
SHA512
9bfa9147fcb796ff9cd28b7d000ea5ddf4d8900774bf55f0014c71ef734378c17edbed79a0b60161e5fe60772ec4202b49997d515e6c1045ccfdf18d18e8a37a
-
SSDEEP
24576:Dd1Br532aw6OVjczrb0qsHKOxs6SvI42uFzpe/8fcxkm0yjax:jBrMaw6Ohwn4s6SV2uQ8ExBO
Malware Config
Signatures
Files
-
4d509ba35f83646cde1a6ac312a0e748ab982a3409b71fa7890c891b99d16d99.exe windows x86
e9f5b639e3598aa283823adcbfaec314
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
version
VerQueryValueA
ws2_32
WSACancelAsyncRequest
user32
SetScrollRange
gdi32
GetPixel
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
ExtractIconA
comctl32
ImageList_Draw
shlwapi
SHRegGetUSValueA
oledlg
ord8
ole32
CoTaskMemFree
oleaut32
SafeArrayGetElement
wsock32
recvfrom
wininet
InternetOpenUrlA
imagehlp
ImageNtHeader
iphlpapi
GetBestRoute
Sections
.text Size: 1.1MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE