Static task
static1
Behavioral task
behavioral1
Sample
a9ed43cc35e88d35137ccdce72b89b9edbd10545022d4bd6a5145078534ac8ca.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a9ed43cc35e88d35137ccdce72b89b9edbd10545022d4bd6a5145078534ac8ca.exe
Resource
win10v2004-20230221-en
General
-
Target
a9ed43cc35e88d35137ccdce72b89b9edbd10545022d4bd6a5145078534ac8ca
-
Size
917KB
-
MD5
387e93045b050228620bc8ee9f67b6fa
-
SHA1
29018a8e453698c93ead43c44bc2f24d7d7bd05b
-
SHA256
a9ed43cc35e88d35137ccdce72b89b9edbd10545022d4bd6a5145078534ac8ca
-
SHA512
da6747da13dbf715a701a047e9298d91b58747007c76947be06cc9f9272e17d567b53b4ffcf807deb72914d91fe1505396b234ff9c4c11f82b782d5ce78bda51
-
SSDEEP
24576:oNoYMx2ZB8Xk61KmjBpVGE7EjwSM8AXjYRyfhfe:01MKB8UyjsE7DlNMRyw
Malware Config
Signatures
Files
-
a9ed43cc35e88d35137ccdce72b89b9edbd10545022d4bd6a5145078534ac8ca.exe windows x86
a900cce46c67759e2822a509e6acc601
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetParent
gdi32
EndDoc
comdlg32
GetOpenFileNameA
winspool.drv
EnumPrintersA
advapi32
RegSetValueExA
shell32
ExtractIconA
comctl32
ImageList_Draw
oledlg
ord8
ole32
OleLockRunning
olepro32
ord253
oleaut32
SysFreeString
wsock32
htons
Sections
.text Size: 888KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE