Static task
static1
Behavioral task
behavioral1
Sample
310a1363b8a0fde60574e960f2adf137629ca5843d406d644de28cc8af936053.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
310a1363b8a0fde60574e960f2adf137629ca5843d406d644de28cc8af936053.exe
Resource
win10v2004-20221111-en
General
-
Target
310a1363b8a0fde60574e960f2adf137629ca5843d406d644de28cc8af936053
-
Size
2.9MB
-
MD5
b0ebc5b31d1f52d0854e1093bf08edd0
-
SHA1
222fffd7000cd361cfc82ed33e93bfb4bbedee28
-
SHA256
310a1363b8a0fde60574e960f2adf137629ca5843d406d644de28cc8af936053
-
SHA512
906529265f5498f4205a52e85400d251ebb1aa5cea64af9ce91bbc3c2f86bc4076c46fb6bfcf692aec09edb361c9cefa9e345b7994513375160754004cfa8cdc
-
SSDEEP
49152:r5xtmNwxohvvNpySoa7uHsxqOiZiuSnnN1RpuZHLaER5vWkYp8CBWRhTF:rrpohvbBj7uHswOiZiuSn/TuZHLa8dxf
Malware Config
Signatures
Files
-
310a1363b8a0fde60574e960f2adf137629ca5843d406d644de28cc8af936053.exe windows x86
75292e2e06918c17b34be4703c2ae626
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
IsEqualGUID
comctl32
InitializeFlatSB
imm32
ImmSetCompositionWindow
winspool.drv
WritePrinter
shell32
ShellExecuteA
wininet
HttpSendRequestExA
urlmon
URLDownloadToFileA
comdlg32
PageSetupDlgA
wsock32
WSACleanup
iphlpapi
GetAdaptersInfo
oledlg
OleUIObjectPropertiesA
Sections
CODE Size: 2.8MB - Virtual size: 18.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE