Static task
static1
Behavioral task
behavioral1
Sample
f2ea3d83f8a4a51e1aed9b09cb3499dda921a9655fd66bb27fc6e498889b29b4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f2ea3d83f8a4a51e1aed9b09cb3499dda921a9655fd66bb27fc6e498889b29b4.exe
Resource
win10v2004-20220901-en
General
-
Target
f2ea3d83f8a4a51e1aed9b09cb3499dda921a9655fd66bb27fc6e498889b29b4
-
Size
1.1MB
-
MD5
018461e97a1ca897ccfe1c132e62eef5
-
SHA1
2d58168f1b453243a2926bbdf3070e4ae96bcc15
-
SHA256
f2ea3d83f8a4a51e1aed9b09cb3499dda921a9655fd66bb27fc6e498889b29b4
-
SHA512
a4a452bdb1fd280a7e3a1c9e072791ffa9363fbaeefa548ccb128aa4cdac3d24e8be8f30d77e40dc88bacfec5ee3c8c19a3322a07514ca7af44473bf3f6ce1ee
-
SSDEEP
24576:jd1Br532aw6OVjczrb0qsHKOxs6SvI42uFzpe/8fcxkm0yjax:DBrMaw6Ohwn4s6SV2uQ8ExBO
Malware Config
Signatures
Files
-
f2ea3d83f8a4a51e1aed9b09cb3499dda921a9655fd66bb27fc6e498889b29b4.exe windows x86
e9f5b639e3598aa283823adcbfaec314
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
version
VerQueryValueA
ws2_32
WSACancelAsyncRequest
user32
SetScrollRange
gdi32
GetPixel
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
ExtractIconA
comctl32
ImageList_Draw
shlwapi
SHRegGetUSValueA
oledlg
ord8
ole32
CoTaskMemFree
oleaut32
SafeArrayGetElement
wsock32
recvfrom
wininet
InternetOpenUrlA
imagehlp
ImageNtHeader
iphlpapi
GetBestRoute
Sections
.text Size: 1.1MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE