Static task
static1
Behavioral task
behavioral1
Sample
0503bbb02cb31bb2b222c498579bf2a99da956edd3516ad7d14dabbe23e15f03.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
0503bbb02cb31bb2b222c498579bf2a99da956edd3516ad7d14dabbe23e15f03.exe
Resource
win10v2004-20230220-en
General
-
Target
0503bbb02cb31bb2b222c498579bf2a99da956edd3516ad7d14dabbe23e15f03
-
Size
301KB
-
MD5
d751876b01598ff1f9df37dd37b4b501
-
SHA1
b9c385206bda9f529f844b9264a2c83f6b750454
-
SHA256
0503bbb02cb31bb2b222c498579bf2a99da956edd3516ad7d14dabbe23e15f03
-
SHA512
e22b684a7fdd0e2cf0136e67b146d9514dec8c35ce28811ac4b23ca75eac754bb68de84a32a16553a9c4d996d21dc4054d102ae73f79b627df6a57bd8c69f865
-
SSDEEP
6144:YBcbOK38SiwbXZHkRkQQzOOXsWK7MHkvG4clo/XgQL1HmgkS4piCAfF1Dcmu:YOb3/XZTSvKkvGtlwXg+WS4ACALDu
Malware Config
Signatures
Files
-
0503bbb02cb31bb2b222c498579bf2a99da956edd3516ad7d14dabbe23e15f03.exe windows x86
daa7728c11897ad21856b50f3dd8b616
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoTaskMemFree
comctl32
ImageList_SetIconSize
winspool.drv
OpenPrinterA
shell32
ShellExecuteA
comdlg32
GetSaveFileNameA
Sections
CODE Size: 290KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE