Static task
static1
Behavioral task
behavioral1
Sample
f55de6c17a5c5315dc2da21e327c88eac25aef6a31dda4d1fd4a8b9850429581.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f55de6c17a5c5315dc2da21e327c88eac25aef6a31dda4d1fd4a8b9850429581.exe
Resource
win10v2004-20221111-en
General
-
Target
f55de6c17a5c5315dc2da21e327c88eac25aef6a31dda4d1fd4a8b9850429581
-
Size
678KB
-
MD5
35edfcaecbf80d1a4e7767530f755d80
-
SHA1
c3c2dfca1918a2e0a1737f2a117165f373702f2f
-
SHA256
f55de6c17a5c5315dc2da21e327c88eac25aef6a31dda4d1fd4a8b9850429581
-
SHA512
cc009be1f0bc38b53de5979db710293810fb68c0518c290401ebbe507876fb32339db61c49dfa320ab8c16911817281572890eda9a5e2da350f437c3c363b965
-
SSDEEP
12288:j0vdhwoEUup7zbjZOcfLUSg3RYLqMhHftJ97XDba3zmf8IwLYeSu:jyfEH7zo+QSUkqMhHflznVfVwLYp
Malware Config
Signatures
Files
-
f55de6c17a5c5315dc2da21e327c88eac25aef6a31dda4d1fd4a8b9850429581.exe windows x86
b5f80dcb9bd0f432b1ce7a7320f14176
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
shlwapi
StrCmpNA
user32
SetParent
gdi32
CreateRectRgn
comdlg32
GetOpenFileNameA
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
ShellExecuteA
comctl32
ImageList_Draw
oledlg
ord8
ole32
CoTaskMemAlloc
olepro32
ord253
oleaut32
VariantClear
Sections
.text Size: 667KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE