Static task
static1
Behavioral task
behavioral1
Sample
9714b2e7334cdc93711b89a7307a7cb6ef6af905619a9438901dae536fed2ff4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9714b2e7334cdc93711b89a7307a7cb6ef6af905619a9438901dae536fed2ff4.exe
Resource
win10v2004-20220812-en
General
-
Target
9714b2e7334cdc93711b89a7307a7cb6ef6af905619a9438901dae536fed2ff4
-
Size
573KB
-
MD5
4e2cbd0f29be845850af795bc299790c
-
SHA1
8d0d1e8b934cf20dd0e4758605a5516a815cfdf7
-
SHA256
9714b2e7334cdc93711b89a7307a7cb6ef6af905619a9438901dae536fed2ff4
-
SHA512
459ab14a65da56b03c293d38df4b33a72a3f643b3e0c76806008fea14faa9cc16097521c6119ae2d03956708981e1f9b61b1fbd222ee1186db9f2c6e4e9761f7
-
SSDEEP
12288:BLVxJ8chNyWuz6FEHOoxkMo2vWbIpn+D73J5SmSKGOUG4:zxJ1NyNz6FAqMoPIpn4yxG4
Malware Config
Signatures
Files
-
9714b2e7334cdc93711b89a7307a7cb6ef6af905619a9438901dae536fed2ff4.exe windows x86
db2e0e071d67c1d11750a6ed6e4968d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
midiStreamOut
ws2_32
htons
user32
GetActiveWindow
gdi32
TextOutA
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ord17
comdlg32
ChooseFontA
Sections
.text Size: 559KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE