Static task
static1
Behavioral task
behavioral1
Sample
0110e804a08d1afb58678ec19dbe5203577a975d047b7134e5c34eb49f74aae9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0110e804a08d1afb58678ec19dbe5203577a975d047b7134e5c34eb49f74aae9.exe
Resource
win10v2004-20220812-en
General
-
Target
0110e804a08d1afb58678ec19dbe5203577a975d047b7134e5c34eb49f74aae9
-
Size
53KB
-
MD5
67dcef1c336a0b6530f374f4605da620
-
SHA1
70628a3046192cab9e8e6f460c63f13f920fcc6e
-
SHA256
0110e804a08d1afb58678ec19dbe5203577a975d047b7134e5c34eb49f74aae9
-
SHA512
2285cadf245b9c8c7991d261b7ca7fcc1c654e6b42b9333106173ffeda9aa4d41e2fddec1734d716ff31a7758a62929b7c86a3a4f64b617f1449afcf532f7036
-
SSDEEP
768:0M15FfqRUOALx1DEua9Sgi9f6BZwuLe45CZDigHpBggKuOrTJ:0MHI6/DE1S0F5CJigHzggKXN
Malware Config
Signatures
Files
-
0110e804a08d1afb58678ec19dbe5203577a975d047b7134e5c34eb49f74aae9.exe windows x86
327c3c13991809983e7a9487f6dde3b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
BeginPaint
GetClientRect
DrawTextA
EndPaint
DestroyWindow
DefWindowProcA
PostQuitMessage
PostMessageA
CreateWindowExA
ShowWindow
UpdateWindow
LoadStringA
LoadIconA
LoadCursorA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
kernel32
HeapAlloc
HeapFree
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
VirtualAlloc
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GlobalSize
SizeofResource
CreateThread
WaitForSingleObject
GlobalAlloc
FindNextFileW
Sleep
FindFirstFileW
FindClose
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetEnvironmentStrings
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
comctl32
InitCommonControlsEx
msimg32
AlphaBlend
GradientFill
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ