Static task
static1
Behavioral task
behavioral1
Sample
9d471a8fff11030685819d59fe9cfe65c9b2ae7d9d69ce8deb940cb917ed714c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9d471a8fff11030685819d59fe9cfe65c9b2ae7d9d69ce8deb940cb917ed714c.exe
Resource
win10v2004-20221111-en
General
-
Target
9d471a8fff11030685819d59fe9cfe65c9b2ae7d9d69ce8deb940cb917ed714c
-
Size
924KB
-
MD5
21f043702bbbe4ce307931a7b06b2d89
-
SHA1
73674e2041e390aed4347a8e61988dde7d2e6335
-
SHA256
9d471a8fff11030685819d59fe9cfe65c9b2ae7d9d69ce8deb940cb917ed714c
-
SHA512
8a573fb9dc8ca5d70407c4ef14517e29098128b4233f184b160ffa48a0709889a76e61f355d337f268083b362c51307a23d54f10ed86f8545d0e8f999f7281e0
-
SSDEEP
24576:skIpz2ovFt3G/gxWAX1wn0Ynxx4Fuy3FLWKzbwy:/Aq+Ft3sAm0ExyUy3FLW6cy
Malware Config
Signatures
Files
-
9d471a8fff11030685819d59fe9cfe65c9b2ae7d9d69ce8deb940cb917ed714c.exe windows x86
005035480686c78688da2cc08ae91689
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
msimg32
GradientFill
gdi32
UnrealizeObject
version
VerQueryValueA
ole32
StgIsStorageFile
comctl32
_TrackMouseEvent
shell32
ShellExecuteA
winspool.drv
OpenPrinterA
comdlg32
PrintDlgA
Sections
.text Size: 752KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ