Static task
static1
Behavioral task
behavioral1
Sample
37fc3e3e00427c215cd75a7c9427696c62e14056e835691e631f42540eb7492a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
37fc3e3e00427c215cd75a7c9427696c62e14056e835691e631f42540eb7492a.exe
Resource
win10v2004-20220812-en
General
-
Target
37fc3e3e00427c215cd75a7c9427696c62e14056e835691e631f42540eb7492a
-
Size
177KB
-
MD5
6f2cd008a6823c8756e93b77de65efed
-
SHA1
f52bc3edf9658cde82c52b7e0973dbc7270d1b54
-
SHA256
37fc3e3e00427c215cd75a7c9427696c62e14056e835691e631f42540eb7492a
-
SHA512
a7d1b2f65086df7642d7c329092d3ffd8eb0a30b4ecdbb326ef1f2296313fd183b478a2d93476e68f5c0e71f577b6bbf308979ad19896c9aa11cb6d030a630a2
-
SSDEEP
3072:Z4bOkUB7s3gGuCLhcuqrzlk7vevp2A6pqaXG01SEId6LaMY9Tue/XJ0In:Z4wB7stLWuqrzlV2rp9z1SEzLaMY9TuW
Malware Config
Signatures
Files
-
37fc3e3e00427c215cd75a7c9427696c62e14056e835691e631f42540eb7492a.exe windows x86
7732e5db621e5492dc03a44bf0f4fd19
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextExtentPointA
DeleteObject
SelectObject
GetDeviceCaps
GetTextMetricsA
CreateFontIndirectA
msimg32
AlphaBlend
TransparentBlt
kernel32
GetStdHandle
GetCPInfoExA
UnhandledExceptionFilter
InterlockedExchange
SetHandleCount
WriteFile
WideCharToMultiByte
QueryPerformanceCounter
GetEnvironmentStringsW
lstrlenW
GetEnvironmentStrings
TlsGetValue
DeleteCriticalSection
GetLocaleInfoA
LeaveCriticalSection
GetFileType
EnumResourceTypesA
GetCPInfo
FreeEnvironmentStringsA
GetLastError
InterlockedIncrement
FreeEnvironmentStringsW
RaiseException
GetVersionExA
GetACP
GetStartupInfoA
GetThreadLocale
MultiByteToWideChar
LoadLibraryW
EnterCriticalSection
GetOEMCP
TlsSetValue
InitializeCriticalSection
GetTickCount
HeapSize
GetCurrentProcessId
ole32
CoGetMalloc
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
Sections
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ