Static task
static1
Behavioral task
behavioral1
Sample
81709464c0fa89938d9c2560d19bd5fe014cdcee85612f3d6c9280858ddffef9.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
81709464c0fa89938d9c2560d19bd5fe014cdcee85612f3d6c9280858ddffef9.exe
Resource
win10v2004-20230220-en
General
-
Target
81709464c0fa89938d9c2560d19bd5fe014cdcee85612f3d6c9280858ddffef9
-
Size
3.8MB
-
MD5
b8e3919d34a9181a345da1638d59b50f
-
SHA1
ff588ef572d08f9b2d1dec7914a3a00c85f3c0cd
-
SHA256
81709464c0fa89938d9c2560d19bd5fe014cdcee85612f3d6c9280858ddffef9
-
SHA512
85557eac696b34009bc824413e0b7c1e4d441d26e4154a21ca5a44159fc59d156d5e8c459f7d4e92be025642d5794b36bd06e5cf47e745e9729660df03627159
-
SSDEEP
98304:EUFKoCUiZ78aG3/lgBNRYDqNMQKWsRbbRn/BGc6AJcurc5mOQd:Ec5CUiiaG3q1YDcKWEN/BGc6AoJO
Malware Config
Signatures
Files
-
81709464c0fa89938d9c2560d19bd5fe014cdcee85612f3d6c9280858ddffef9.exe windows x86
a6c39ea1e771a0880244dc044e984a42
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
midiStreamOut
ws2_32
socket
rasapi32
RasHangUpA
user32
GetKeyState
gdi32
LineTo
msimg32
GradientFill
winspool.drv
DocumentPropertiesA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CoGetClassObject
oleaut32
SysAllocStringLen
comctl32
ImageList_Draw
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
Sections
.text Size: 2.7MB - Virtual size: 12.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE