Static task
static1
Behavioral task
behavioral1
Sample
0f0ec74f40fec60aec03b67d91e9f649f1bf79ccdccbec19ff785fe18019e380.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
0f0ec74f40fec60aec03b67d91e9f649f1bf79ccdccbec19ff785fe18019e380.exe
Resource
win10v2004-20220901-en
General
-
Target
0f0ec74f40fec60aec03b67d91e9f649f1bf79ccdccbec19ff785fe18019e380
-
Size
1.8MB
-
MD5
3a7c05600f8d1aa8e34bd9cd02c9343d
-
SHA1
5a7673bc357c2b4805dff319cc257538719b6d4a
-
SHA256
0f0ec74f40fec60aec03b67d91e9f649f1bf79ccdccbec19ff785fe18019e380
-
SHA512
93276618f6478b5bac7bf6491f955e7b4b9b710c9406ce957cb024dac4cd70422d3a537e9dfaad32ca7de7542e494e9c568986d88313fa25e0513bf3371b4fba
-
SSDEEP
24576:xT+zQcv/Rs0ONlCAaQESg5Zs/95a1UBS08t+BKwqk1/Hk4VB6sWm0+3p0bEP0aPp:gQURs0GlvaxG/95LLDhkcBzZl3J
Malware Config
Signatures
Files
-
0f0ec74f40fec60aec03b67d91e9f649f1bf79ccdccbec19ff785fe18019e380.exe windows x86
ebcc8c1ecb02d574ca7e2dab82c4ccc3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetOpenEnumA
version
VerQueryValueA
gdi32
WidenPath
ole32
IsEqualGUID
comctl32
ImageList_SetIconSize
imm32
ImmGetDescriptionA
winspool.drv
OpenPrinterA
shell32
ShellExecuteExA
wininet
InternetCheckConnectionA
urlmon
CoInternetCreateZoneManager
comdlg32
ChooseFontA
wsock32
WSACleanup
winmm
timeGetTime
netapi32
Netbios
woptip2p
GetPort2ProcessList
shlwapi
PathFindFileNameA
psapi.dll
GetModuleFileNameExA
Sections
CODE Size: 1.7MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE