Static task
static1
Behavioral task
behavioral1
Sample
03bfa033e17842c34798a7880afa3d69a513fabc379ed63b1945294d973672ab.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
03bfa033e17842c34798a7880afa3d69a513fabc379ed63b1945294d973672ab.exe
Resource
win10v2004-20230220-en
General
-
Target
03bfa033e17842c34798a7880afa3d69a513fabc379ed63b1945294d973672ab
-
Size
2.5MB
-
MD5
0b3437ad164cb69e54c7d75474bd27cb
-
SHA1
576cfd3acdcb5b54db285e6c589b99cf129b44b1
-
SHA256
03bfa033e17842c34798a7880afa3d69a513fabc379ed63b1945294d973672ab
-
SHA512
e5382844da5c095bc2f1191a3b81cfd2b832b1753037d770ba7b298267beaf992c0dc7118f249987ff929fd3935b7842fd4d36e02d1e49471168abae8e4ef946
-
SSDEEP
49152:00QUAFEZ2i6w6T0iHVQTPlJqMhE65DGcWwNHmJuVuok5/:00QhFni6zAi1Q7/h0iNMugF
Malware Config
Signatures
Files
-
03bfa033e17842c34798a7880afa3d69a513fabc379ed63b1945294d973672ab.exe windows x86
34f3edee8a9b816216173f424a878026
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
CryptAcquireContextA
version
GetFileVersionInfoA
wsock32
WSAAsyncGetHostByName
winspool.drv
ClosePrinter
comctl32
FlatSB_GetScrollInfo
gdi32
AbortDoc
msimg32
AlphaBlend
shell32
SHGetFileInfoW
user32
ActivateKeyboardLayout
winmm
sndPlaySoundA
ole32
CLSIDFromProgID
oleaut32
CreateErrorInfo
gdiplus
GdiplusStartup
Sections
.text Size: 2.5MB - Virtual size: 10.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE