Static task
static1
Behavioral task
behavioral1
Sample
c955d15de786154108180627d2c0810299519e50ab190f0cb62a4bce0de9a241.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c955d15de786154108180627d2c0810299519e50ab190f0cb62a4bce0de9a241.exe
Resource
win10v2004-20220901-en
General
-
Target
c955d15de786154108180627d2c0810299519e50ab190f0cb62a4bce0de9a241
-
Size
290KB
-
MD5
129967a9753cb885a4eeeb986d876b3d
-
SHA1
f1c3c4fd98d4513e8c0e7d72b7d0552ef5a9aff2
-
SHA256
c955d15de786154108180627d2c0810299519e50ab190f0cb62a4bce0de9a241
-
SHA512
c26b4ef72ab036c9c30a199b47899bf8899e5f185907d5d054d79d6b80936380d4a4eac5ceb16642a8bca803decdd63ae4e1a21953423bb07a4d7729b6e93151
-
SSDEEP
6144:rRxZvPX7XnLc6FoXLXPeiuUDYfqeygBl4TtKxk3v0Lrj28nd2H7p:dxZvfrLc17XPkUDYfqJgEKu3v0Lrae2b
Malware Config
Signatures
Files
-
c955d15de786154108180627d2c0810299519e50ab190f0cb62a4bce0de9a241.exe windows x86
cf1e21cf9033970fadb12bc3b9a8f03c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
GetFileSecurityW
user32
EqualRect
gdi32
SetBkMode
comctl32
InitCommonControlsEx
shlwapi
PathFindExtensionW
ole32
CoTaskMemFree
oleaut32
SysAllocStringLen
shell32
DragFinish
winspool.drv
ClosePrinter
Sections
.text Size: 275KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE