Static task
static1
Behavioral task
behavioral1
Sample
b344a79eaae1323b84a9d3c2ffe3daacf7b2325d06b8d69d5378b764aa69edef.exe
Resource
win7-20240220-en
General
-
Target
b344a79eaae1323b84a9d3c2ffe3daacf7b2325d06b8d69d5378b764aa69edef
-
Size
3.9MB
-
MD5
7870a589dca160547d2b2770bbdf524c
-
SHA1
fdda6c76a0b079faa687a40484437bd5167e01c0
-
SHA256
b344a79eaae1323b84a9d3c2ffe3daacf7b2325d06b8d69d5378b764aa69edef
-
SHA512
b51cc2361e5748d436bf9fa39d8b97c22f2a060ee223b1f3033de4929cfe4275ff69ea2dd476db43de1d36034f87baaadf590e224b7836f2e65bd64e65584bd2
-
SSDEEP
98304:sal3KbVdxF/Dx8cnwWSuDYHV5W4Knzk5SbXmjDCBYl2s+J:snbv/v0Wvz8SLm/CBY2hJ
Malware Config
Signatures
Files
-
b344a79eaae1323b84a9d3c2ffe3daacf7b2325d06b8d69d5378b764aa69edef.exe windows:4 windows x86 arch:x86
d98218e7c956a9c040d3bba7941a0817
Code Sign
38:68:58:8e:cb:27:e3:34:d8:5b:06:80:62:c5:cd:21:77:49:6b:8eSigner
Actual PE Digest38:68:58:8e:cb:27:e3:34:d8:5b:06:80:62:c5:cd:21:77:49:6b:8eDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
midiStreamOut
ws2_32
socket
rasapi32
RasHangUpA
user32
ChildWindowFromPointEx
gdi32
ExtSelectClipRgn
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
SHGetPathFromIDListA
ole32
CLSIDFromString
oleaut32
SafeArrayPtrOfIndex
comctl32
ord17
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
Sections
.text Size: 591KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE