Static task
static1
Behavioral task
behavioral1
Sample
37c0d358a3b63323720462062bf75350008b8cfbcffbe1255aabc4dd71dcf603.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
37c0d358a3b63323720462062bf75350008b8cfbcffbe1255aabc4dd71dcf603.exe
Resource
win10v2004-20220812-en
General
-
Target
37c0d358a3b63323720462062bf75350008b8cfbcffbe1255aabc4dd71dcf603
-
Size
404KB
-
MD5
8988845c408d9880fb48742d0fb85369
-
SHA1
a00be8866349cea0d2c2a7aeef1ada96070022ee
-
SHA256
37c0d358a3b63323720462062bf75350008b8cfbcffbe1255aabc4dd71dcf603
-
SHA512
1e7c6a660ef91140b993d1291aafd6845c2fab9a60b5bd600248dee8f2f7076bf3c5ac0172ef72993137045a26b7c380b6fc591a7c31b7693451a28aa6968bde
-
SSDEEP
12288:PJefzommp7K8L7yJQnxasuQIsAo5iluqn34HSTV:BefRyK8iSeRoYlfn34+
Malware Config
Signatures
Files
-
37c0d358a3b63323720462062bf75350008b8cfbcffbe1255aabc4dd71dcf603.exe windows x86
5bb7abc46846c2ce2c881ab2b96e8079
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
GetEnvironmentStrings
SetHandleCount
GetFileType
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
FlushFileBuffers
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
SetStdHandle
SetEndOfFile
SetEnvironmentVariableA
LocalAlloc
GetCurrentProcess
GetCurrentThreadId
LeaveCriticalSection
InterlockedExchange
SetLastError
SetProcessShutdownParameters
FlushInstructionCache
GetProcessShutdownParameters
GetCurrentProcessId
InterlockedDecrement
GetLastError
DeleteCriticalSection
HeapFree
CloseHandle
GetProcessHeap
HeapAlloc
VirtualFree
VirtualQueryEx
VirtualAlloc
GetCommandLineA
GetStartupInfoA
RtlUnwind
LCMapStringA
GetStringTypeA
ExitThread
ExitProcess
CreateThread
HeapCreate
GetStdHandle
GetOEMCP
user32
TranslateMessage
GetClientRect
OffsetRect
CharUpperA
GetKeyState
IsWindow
GetWindowModuleFileNameA
msimg32
TransparentBlt
gdi32
GetBkColor
BitBlt
SelectObject
GetBkMode
GetDCPenColor
SetDCPenColor
SetTextCharacterExtra
Sections
.text Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 442KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ