Static task
static1
Behavioral task
behavioral1
Sample
141ba4431ae574f59f5055b566a75c3f3291b5ffb72a631e58740a5289e008c2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
141ba4431ae574f59f5055b566a75c3f3291b5ffb72a631e58740a5289e008c2.exe
Resource
win10v2004-20220812-en
General
-
Target
141ba4431ae574f59f5055b566a75c3f3291b5ffb72a631e58740a5289e008c2
-
Size
1.6MB
-
MD5
83ad57dfbece99295e237fc1dd905d50
-
SHA1
505a316d634b71f3e14dba5b5c978529e8c74ef3
-
SHA256
141ba4431ae574f59f5055b566a75c3f3291b5ffb72a631e58740a5289e008c2
-
SHA512
813290619a9b7b5c07150f399462969d4973eac22bdb9003708be97baa24ed062924b7b63920b0366587227040b3bbfcc66bb979a65fe6c506f6a537429e6230
-
SSDEEP
49152:YmTfJOMgTg3xAUveMLwxcugs1zDHu8WgB:Td+IxAsPLwUz+B
Malware Config
Signatures
Files
-
141ba4431ae574f59f5055b566a75c3f3291b5ffb72a631e58740a5289e008c2.exe windows x86
c796fac1b55bb7d8dbf57ad1f2112b65
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
socket
kernel32
GetEnvironmentStrings
user32
GetMessagePos
gdi32
PtVisible
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
Shell_NotifyIconA
ole32
CoCreateInstance
oleaut32
SafeArrayGetLBound
comctl32
ImageList_Add
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 288KB - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 24KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ