Static task
static1
Behavioral task
behavioral1
Sample
27d8e5c9973ac9e2a75e024c2ffc0cc11ed9434c5b19ec295abef2e9b2638fa3.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
27d8e5c9973ac9e2a75e024c2ffc0cc11ed9434c5b19ec295abef2e9b2638fa3.exe
Resource
win10v2004-20230220-en
General
-
Target
27d8e5c9973ac9e2a75e024c2ffc0cc11ed9434c5b19ec295abef2e9b2638fa3
-
Size
5.6MB
-
MD5
0db5ba999f9db4302c9138c1548fcc99
-
SHA1
b2669c981ed1c6a9e10fe66e2cd3cd3584b34ac1
-
SHA256
27d8e5c9973ac9e2a75e024c2ffc0cc11ed9434c5b19ec295abef2e9b2638fa3
-
SHA512
82cfc56b390d9736e3a99262c12718e5a46994d356fd25f92e8f5c7c75c49bad0904fe9a0a6171d5bcbbb08c98620f9b1247de42ddd89961a7230f9997b15604
-
SSDEEP
98304:PpWk85EEdn2N5Cwk+AfF9YnAHV8AK+rPP1yjbs0S5+JCAAaJqZ3KRhFq8Ysd:Pp7Ono5NXaFenHA1rPPs/s/+JCrY1DFq
Malware Config
Signatures
Files
-
27d8e5c9973ac9e2a75e024c2ffc0cc11ed9434c5b19ec295abef2e9b2638fa3.exe windows x86
9fd07d55142f3c2018bbc42be2ec87a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
CharNextW
gdi32
WidenPath
version
VerQueryValueW
netapi32
NetWkstaGetInfo
olepro32
OleLoadPicture
ole32
CreateStreamOnHGlobal
shell32
SHGetFileInfoW
comctl32
InitializeFlatSB
wininet
InternetReadFile
msvcrt
_mbctype
comdlg32
PrintDlgW
winspool.drv
WritePrinter
winmm
timeSetEvent
oledlg
OleUIObjectPropertiesW
gdiplus
GdipGetPenFillType
oleacc
LresultFromObject
shlwapi
StrCmpLogicalW
dog_windows
dog_free
usp10
ScriptApplyDigitSubstitution
msimg32
GradientFill
Sections
.text Size: 5.5MB - Virtual size: 26.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE