Static task
static1
Behavioral task
behavioral1
Sample
cda24bb824eb5036c357bb1c2a3517787cc985d522bfbdf03d37a177350feb9a.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
cda24bb824eb5036c357bb1c2a3517787cc985d522bfbdf03d37a177350feb9a.exe
Resource
win10v2004-20230220-en
General
-
Target
cda24bb824eb5036c357bb1c2a3517787cc985d522bfbdf03d37a177350feb9a
-
Size
2.6MB
-
MD5
ea782cb62454ead961de0aaa1305f471
-
SHA1
201a208f49a24b8b0f6c51f36a44fa81013a852e
-
SHA256
cda24bb824eb5036c357bb1c2a3517787cc985d522bfbdf03d37a177350feb9a
-
SHA512
2513166128f9945fff8ee1de723eac7582129c7b0690a6ee22988555c102442ad5f435b300dcfd453037d8841ecc5e51f8458e3a51ea7a1770679a0e42e80614
-
SSDEEP
49152:CcANF4X8BtWM20ZxsbVtPt5uRTbwLoPlif8bp8ULtgdnrq:jKKXWtWM2qxoVYTblPw8db
Malware Config
Signatures
Files
-
cda24bb824eb5036c357bb1c2a3517787cc985d522bfbdf03d37a177350feb9a.exe windows x86
175369224eb3be6fb350fddfaa3ff3fa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
mpr
WNetGetConnectionA
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
IsEqualGUID
comctl32
ImageList_SetIconSize
winspool.drv
OpenPrinterA
shell32
Shell_NotifyIconA
wininet
InternetReadFile
comdlg32
PageSetupDlgA
wsock32
send
pquery.bin
WyQueryPYWhole
msvcrt
_gcvt
lz32
LZOpenFileA
Sections
CODE Size: 2.5MB - Virtual size: 9.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE