Static task
static1
Behavioral task
behavioral1
Sample
6396c7e84d529e75082b3bcfffdac47e28942a31aa2bed1ae13c340ce870d848.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6396c7e84d529e75082b3bcfffdac47e28942a31aa2bed1ae13c340ce870d848.exe
Resource
win10v2004-20221111-en
General
-
Target
6396c7e84d529e75082b3bcfffdac47e28942a31aa2bed1ae13c340ce870d848
-
Size
609KB
-
MD5
3a27355d4e74501635b9d8bc0289c0b7
-
SHA1
0f29a47413eb56da917eb94eab5742b688732d84
-
SHA256
6396c7e84d529e75082b3bcfffdac47e28942a31aa2bed1ae13c340ce870d848
-
SHA512
568b303b6ce5a48c521c7780ffd6782bdf0b18294fa256fd3cb4f5ceb997086bed6514f2dbff19255ff99b4ea787af1e7bb6249fcc0a32328206d0ce380a2fbd
-
SSDEEP
12288:YJlvE0M1ty1dDRuoc5BWZREdVHw1i+KXc+dn/rgx/srD:Y/JMa1dRuRRdVHIKsEnk0D
Malware Config
Signatures
Files
-
6396c7e84d529e75082b3bcfffdac47e28942a31aa2bed1ae13c340ce870d848.exe windows x86
44834a2755fac5752fbc4f99483448b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegEnumKeyW
comctl32
CreatePropertySheetPageW
comdlg32
GetOpenFileNameW
gdi32
GetCurrentObject
ole32
CoTaskMemFree
oleaut32
VariantClear
shell32
DragAcceptFiles
shlwapi
SHDeleteEmptyKeyW
user32
ShowWindow
ws2_32
recv
winspool.drv
OpenPrinterW
netapi32
NetUserGetInfo
msimg32
AlphaBlend
iphlpapi
GetIpAddrTable
wininet
InternetGetConnectedState
dnsapi
DnsQuery_W
secur32
InitializeSecurityContextW
gdiplus
GdipGetImagePixelFormat
Sections
.text Size: 568KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE