Static task
static1
Behavioral task
behavioral1
Sample
39001cf0633b638ab047c91b897df451be4443df19b0c8de637d5342e719b218.exe
Resource
win7-20220812-en
General
-
Target
39001cf0633b638ab047c91b897df451be4443df19b0c8de637d5342e719b218
-
Size
3.7MB
-
MD5
32a3c1fa10a481a08a09ae8101302b59
-
SHA1
c481b94161b0b4d40e17cffdd317a28c71d7ff1d
-
SHA256
39001cf0633b638ab047c91b897df451be4443df19b0c8de637d5342e719b218
-
SHA512
a9a3fdd53a214fd63fd56370747c12434bd2184f3f46843b9ef9c357c48fe8d11148631863c4dda921c0c17c7d34a7db268541c89bbaf0b8162fb8fb34a238cd
-
SSDEEP
98304:hNu65ZygZSHGTv2g1oDutGO4von6qnGEPm5dM:hNTPgOvoOWonRGOuM
Malware Config
Signatures
Files
-
39001cf0633b638ab047c91b897df451be4443df19b0c8de637d5342e719b218.exe windows x86
24821ed191abea6612346001bcb2bd65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
midiStreamOut
ws2_32
socket
rasapi32
RasHangUpA
user32
ChildWindowFromPointEx
gdi32
ExtSelectClipRgn
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
SHGetPathFromIDListA
ole32
CLSIDFromProgID
oleaut32
SafeArrayGetElement
comctl32
ord17
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
Sections
.text Size: 1.9MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lvdlq Size: 3KB - Virtual size: 3KB