Static task
static1
Behavioral task
behavioral1
Sample
00f556f93fabf6766d5f859556a008eab39a176ba3c979cb143ad118506c33f8.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
00f556f93fabf6766d5f859556a008eab39a176ba3c979cb143ad118506c33f8.exe
Resource
win10v2004-20220414-en
General
-
Target
00f556f93fabf6766d5f859556a008eab39a176ba3c979cb143ad118506c33f8
-
Size
361KB
-
MD5
7bd0e512edd2194c38864df24bbaa71d
-
SHA1
bc811c561cbde749b28f9f3b58f57b1ccc699f1a
-
SHA256
00f556f93fabf6766d5f859556a008eab39a176ba3c979cb143ad118506c33f8
-
SHA512
6f0ea99edf859f8a9fb58fd7cd23efcb7aa284323acb40f426c9eaa780f258c157f61b275ce4d24d359aa42b4c6bfcdb05d04d63acacf0631f8eeee0c837fb81
-
SSDEEP
6144:DV4sEKH6hKEHWVO7Y10lh8BhQA1SJkG7uaxc0okBi7uqSZlFPYej1iv9D/:DEKH6hR2V50zSVSu0xc0okU7d2Pzhiv1
Malware Config
Signatures
Files
-
00f556f93fabf6766d5f859556a008eab39a176ba3c979cb143ad118506c33f8.exe windows x86
fa30060f0dfca9a75632f46d5d363ef1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
CloseHandle
GetTempPathW
GetModuleHandleW
GetBinaryTypeA
GetFileType
FindClose
GetModuleHandleA
CreateFileW
CreateFileA
GetBinaryTypeW
GetTempPathA
GetStartupInfoA
user32
DrawTextW
GetWindowRect
DestroyWindow
GetWindowTextA
DrawTextA
GetWindow
EmptyClipboard
GetWindowTextW
CloseWindow
EnableWindow
IsWindowVisible
DefWindowProcW
DefWindowProcA
ShowWindow
IsWindowEnabled
BeginPaint
GetClipboardData
CloseClipboard
DeleteMenu
gdi32
GetStockObject
CreateRectRgn
CreatePolygonRgn
CreateFontIndirectW
CreateCompatibleDC
CreateRoundRectRgn
CombineRgn
GetDeviceCaps
FrameRgn
CreateCompatibleBitmap
CreateFontIndirectA
CreateSolidBrush
BitBlt
FillRgn
DeleteObject
oleaut32
CreateErrorInfo
SetErrorInfo
SafeArrayCopy
SafeArrayCreate
SysAllocStringByteLen
SysAllocStringLen
SysAllocString
GetErrorInfo
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcmp
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ