Static task
static1
Behavioral task
behavioral1
Sample
025963b62d8e5e00dd777b3e63edb8fff68c90c908de63f0e97280ed6c59da41.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
025963b62d8e5e00dd777b3e63edb8fff68c90c908de63f0e97280ed6c59da41.exe
Resource
win10v2004-20220812-en
General
-
Target
025963b62d8e5e00dd777b3e63edb8fff68c90c908de63f0e97280ed6c59da41
-
Size
96KB
-
MD5
c8188d9e563280f20893592a4432c195
-
SHA1
02bd7fc2c1d2649be7bc84b1e2ed1ee8887df1e7
-
SHA256
025963b62d8e5e00dd777b3e63edb8fff68c90c908de63f0e97280ed6c59da41
-
SHA512
76f39c88072b0705e4261a108a7be1a9dc01fccc247d1e61240e9cf69dfe39b54dd8c21eb1ae5823544a363e3e425b783352cef1b8db9306dd75de1a0b7e941d
-
SSDEEP
3072:aM4bUnZcElgejrszvQFOAQYP2dlFpVY3YdXN0db/hjh:/4bUnb1QzvPXFJPSb5
Malware Config
Signatures
Files
-
025963b62d8e5e00dd777b3e63edb8fff68c90c908de63f0e97280ed6c59da41.exe windows x86
d0113f9655f2e94048b46fce61cb46a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_initterm
fputc
__setusermatherr
calloc
atexit
__p__commode
strcmp
strncpy
__getmainargs
_adjust_fdiv
_acmdln
_XcptFilter
exit
wcslen
free
_except_handler3
__set_app_type
printf
__p__fmode
_exit
kernel32
GetModuleHandleW
LoadLibraryExW
GetShortPathNameA
GetProcAddress
FormatMessageA
VirtualProtectEx
UnhandledExceptionFilter
CompareStringW
IsBadCodePtr
lstrlenA
oleaut32
SysStringLen
SetErrorInfo
SafeArrayGetElement
SafeArrayPutElement
SafeArrayGetUBound
gdi32
CreateDIBitmap
CreatePalette
SetPixel
PolyBezierTo
EnumEnhMetaFile
DeleteObject
CreateMetaFileW
ScaleWindowExtEx
shell32
DragQueryFileA
DragQueryFile
ExtractIconExW
SHGetPathFromIDListW
SHFileOperationW
user32
KillTimer
WaitMessage
ole32
CreateBindCtx
StringFromCLSID
CoRevokeClassObject
DoDragDrop
comctl32
ImageList_Destroy
PropertySheetA
ImageList_SetBkColor
advapi32
LookupPrivilegeValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteValueA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ