Static task
static1
Behavioral task
behavioral1
Sample
33ba0879b194b0e7cf1d84332c8c9b6a4236517895718e8a142d57982d251afd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
33ba0879b194b0e7cf1d84332c8c9b6a4236517895718e8a142d57982d251afd.exe
Resource
win10v2004-20220812-en
General
-
Target
33ba0879b194b0e7cf1d84332c8c9b6a4236517895718e8a142d57982d251afd
-
Size
1.1MB
-
MD5
fe8c52863368925ccb66f1fd9bba857a
-
SHA1
852863434d726dd5659fcfe2454dcf11f694c722
-
SHA256
33ba0879b194b0e7cf1d84332c8c9b6a4236517895718e8a142d57982d251afd
-
SHA512
b623630c8b19a659d464a0d7cff8e725bd2f518dadce9e076f17b5540d316ed176a2f25bc6f7099fc747a196faa2111b1ec379323a58084294622d39c3582858
-
SSDEEP
24576:vpWCLomhyChI4H//YaWDaar6mXulVwBjUnH9P3vZSgFGsJ:vMShJhRHaryw5UnHlBd
Malware Config
Signatures
Files
-
33ba0879b194b0e7cf1d84332c8c9b6a4236517895718e8a142d57982d251afd.exe windows x86
b1995401dc960133b6773535a368a915
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoTaskMemFree
comctl32
ImageList_SetIconSize
winspool.drv
OpenPrinterA
shell32
Shell_NotifyIconA
comdlg32
PageSetupDlgA
wsock32
WSACleanup
oledlg
OleUIObjectPropertiesA
hhctrl.ocx
HtmlHelpA
Sections
CODE Size: 988KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nkh Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE