Static task
static1
Behavioral task
behavioral1
Sample
971e5da76e2284bb9ff227b7531c3b90ced1f980ac1860d8ed79ea8e79211d08.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
971e5da76e2284bb9ff227b7531c3b90ced1f980ac1860d8ed79ea8e79211d08.exe
Resource
win10v2004-20230220-en
General
-
Target
971e5da76e2284bb9ff227b7531c3b90ced1f980ac1860d8ed79ea8e79211d08
-
Size
7.2MB
-
MD5
ac66ec6822360fc0e438b58cb38c7874
-
SHA1
a4a991509bb3607fc0e46190fdb54fbfefc6786c
-
SHA256
971e5da76e2284bb9ff227b7531c3b90ced1f980ac1860d8ed79ea8e79211d08
-
SHA512
c3000884374ae5d19cb4b50e68891fb971c33a33e23255f9ead6b320a0767900b762aabb4d2940c62767b97c81b1facc0d2979635277220184491b5faea35bd0
-
SSDEEP
196608:nAXU8L6JqIlkUWv9lj1j+H4cMqdWq+EqNiEbtfTYOr3w3:nAXUrJqIdWv9XShdWq+EqFfUk3w
Malware Config
Signatures
Files
-
971e5da76e2284bb9ff227b7531c3b90ced1f980ac1860d8ed79ea8e79211d08.exe windows x86
4e563ca9bf72d813a1b1c2e69a783f73
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
LoadIconA
CharUpperBuffW
gdi32
GetTextMetricsA
winmm
waveOutRestart
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ord17
ws2_32
inet_ntoa
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 594KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 965KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pbl0 Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pbl1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pbl2 Size: 7.2MB - Virtual size: 7.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ