Static task
static1
Behavioral task
behavioral1
Sample
081b92fb67e6afa9c48895040718e84d7915f3edb09b00e713e72bdff85a4fc0.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
081b92fb67e6afa9c48895040718e84d7915f3edb09b00e713e72bdff85a4fc0.exe
Resource
win10v2004-20230220-en
General
-
Target
081b92fb67e6afa9c48895040718e84d7915f3edb09b00e713e72bdff85a4fc0
-
Size
380KB
-
MD5
e7c0dfbc376d73e62fe0dfe53ca4e7e5
-
SHA1
786173917a522695bbf33cf88771bc93f55f43a7
-
SHA256
081b92fb67e6afa9c48895040718e84d7915f3edb09b00e713e72bdff85a4fc0
-
SHA512
3e5eb6ee24b77b81ada14042929d213943bef1ad6891732ef6cc499da52ceb64d906e43655701255deb8df310f2ffae0c51d27393674be53eae75f3cefaf0f49
-
SSDEEP
6144:8KU5kn7iYjYCODLEPO58BP2Kow4QdQrk2T0B9Db/7VoOvQTUTYpaARt88F31d4Zf:8e7VYjDuO585cQdQg2Tep/vQTaYtYogB
Malware Config
Signatures
Files
-
081b92fb67e6afa9c48895040718e84d7915f3edb09b00e713e72bdff85a4fc0.exe windows x86
352076988d721cb1582ca7ada28f5c79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetDC
gdi32
PatBlt
winmm
waveOutOpen
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleRun
oleaut32
VariantCopyInd
comctl32
ord17
ws2_32
ioctlsocket
comdlg32
ChooseColorA
Sections
.MPRESS1 Size: 368KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE