Static task
static1
Behavioral task
behavioral1
Sample
e4344b10a6b54a541962bf3f57841c77106999ed2f105c3c052593ff1e148514.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e4344b10a6b54a541962bf3f57841c77106999ed2f105c3c052593ff1e148514.exe
Resource
win10v2004-20220812-en
General
-
Target
e4344b10a6b54a541962bf3f57841c77106999ed2f105c3c052593ff1e148514
-
Size
272KB
-
MD5
65b011ff2d68e9afdb87ca31b648dfb4
-
SHA1
724ba7b3f23dcded60dd5a2c8a9d44aa164bc714
-
SHA256
e4344b10a6b54a541962bf3f57841c77106999ed2f105c3c052593ff1e148514
-
SHA512
e9f6b7cc5ff29737a867e4480a0a82c1559da4ac9005a663030cedc8326dc852803e17f0aac0dd730f85315e0aea76c750b51506e9a2f75ce03a8eed4287062b
-
SSDEEP
6144:FWqrVJqmfIqNJedGMCTLT51tfZoNjs+8396O4m5WHIGGPl0UKgggX:7rVYWLedGlZoNUBz5WHfGN08
Malware Config
Signatures
Files
-
e4344b10a6b54a541962bf3f57841c77106999ed2f105c3c052593ff1e148514.exe windows x86
71ae4e7599d798dd7c7e5828d348e6ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
dhplay
ord73
user32
EqualRect
gdi32
CreateSolidBrush
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
advapi32
RegEnumKeyExW
shell32
SHBrowseForFolderW
comctl32
ImageList_GetIconSize
shlwapi
PathIsUNCW
oledlg
OleUIBusyW
ole32
CoRegisterMessageFilter
oleaut32
SysAllocString
Sections
.text Size: 241KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE