Static task
static1
Behavioral task
behavioral1
Sample
382cb93fa99bbc96c2369b450462a67410b0a4bc991cb757fffb1c33611e4465.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
382cb93fa99bbc96c2369b450462a67410b0a4bc991cb757fffb1c33611e4465.exe
Resource
win10v2004-20220901-en
General
-
Target
382cb93fa99bbc96c2369b450462a67410b0a4bc991cb757fffb1c33611e4465
-
Size
2.7MB
-
MD5
e320f0749867a10c6d832d4472397f07
-
SHA1
c6e3af42643efe79f6e8d9f93a9f8ed2d970a007
-
SHA256
382cb93fa99bbc96c2369b450462a67410b0a4bc991cb757fffb1c33611e4465
-
SHA512
81a13fb698c1a17f3e782fad098769143833e2b9a7d232c379475f90101953b5a63b8fb812d0698a284c4e6e4383b677ac1959faf31f3a473c8ef17a6ffd940d
-
SSDEEP
49152:VRvQPuk8+Yfx2CnOuPnw87TIpZp7W8uyMY5r4zHSDvEQ4KXAGlJL9brvb:VRIPuk8+Yp2Dc5TepJCH+vHAcJxXvb
Malware Config
Signatures
Files
-
382cb93fa99bbc96c2369b450462a67410b0a4bc991cb757fffb1c33611e4465.exe windows x86
4490bf90ca81f384dbf9c91dcb0e1c12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep
MulDiv
user32
GetKeyboardType
CreateWindowExA
SetWindowLongW
advapi32
RegQueryValueExA
RegSetValueExA
oleaut32
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
winspool.drv
OpenPrinterA
shell32
ShellExecuteA
comdlg32
PrintDlgA
shlwapi
PathIsUNCA
imagehlp
ImageDirectoryEntryToData
wsock32
WSAStartup
winmm
mciSendCommandA
libcee
renet34
icudf
openDB
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
CODE Size: 1.3MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ