Static task
static1
Behavioral task
behavioral1
Sample
879d0f4bb9748dfa5d7c922be039c32cac0235257f4c1bc17c4d4a8a0c93d5e3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
879d0f4bb9748dfa5d7c922be039c32cac0235257f4c1bc17c4d4a8a0c93d5e3.exe
Resource
win10v2004-20221111-en
General
-
Target
879d0f4bb9748dfa5d7c922be039c32cac0235257f4c1bc17c4d4a8a0c93d5e3
-
Size
832KB
-
MD5
531c5e35a5036c10238117e29c8dbd25
-
SHA1
cc7870889cd6603cec2b2f63ff6690a96d7fca15
-
SHA256
879d0f4bb9748dfa5d7c922be039c32cac0235257f4c1bc17c4d4a8a0c93d5e3
-
SHA512
86ab065a3ff73f7fabd1061143aa226387c70303dd73aedaf020f0585fe4f051e242ef5a689e321f764c3a0246857934250fc2f978bc575bfa373148f1422532
-
SSDEEP
24576:LNYtG9+Bb/KtQTVf0qy0GLGT1AgMVoOml:CGgBzKuTJxytLyPMVE
Malware Config
Signatures
Files
-
879d0f4bb9748dfa5d7c922be039c32cac0235257f4c1bc17c4d4a8a0c93d5e3.exe windows x86
4cbb9f37f2130887a1e4cf07e0105347
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
EnableMenuItem
gdi32
IntersectClipRect
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
advapi32
RegQueryValueW
shell32
SHGetPathFromIDListW
comctl32
ImageList_GetImageCount
shlwapi
PathIsUNCW
ole32
CoDisconnectObject
oleaut32
OleCreateFontIndirect
libmng
_mng_putchunk_term@20
ijl15
ord4
winmm
PlaySoundW
oledlg
OleUIBusyW
Sections
.text Size: 792KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE