Static task
static1
Behavioral task
behavioral1
Sample
801e4546d3c51f98d16164376b39444f88b19392ae98416ead4b38c7eafa1642.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
801e4546d3c51f98d16164376b39444f88b19392ae98416ead4b38c7eafa1642.exe
Resource
win10v2004-20220812-en
General
-
Target
801e4546d3c51f98d16164376b39444f88b19392ae98416ead4b38c7eafa1642
-
Size
140KB
-
MD5
6c47f93bc9501baa009b0d1fc899c90a
-
SHA1
0ae90b5e6907624227505fd9cb3bfe596386abe4
-
SHA256
801e4546d3c51f98d16164376b39444f88b19392ae98416ead4b38c7eafa1642
-
SHA512
64244b0e173e7ece2290ab466cbfe6a1af1b90e754c1bf77060823d3ee648e268a8386dc7aee4c26ee4dd6118eb0b32c675cb4f3021f7636384dfb0306346df8
-
SSDEEP
3072:5WaAkvCHpvLTPoeLMoQaAwOcJBCZWgoRybQWSTYV2:ga5qxLTQeaaAw3mWlY
Malware Config
Signatures
Files
-
801e4546d3c51f98d16164376b39444f88b19392ae98416ead4b38c7eafa1642.exe windows x86
cc28dbdcf913a200b86720768aec996c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CopyEnhMetaFileA
msvcrt
sprintf
memcmp
srand
asin
wcstol
wcschr
log10
abs
strlen
comdlg32
GetFileTitleA
ChooseColorA
GetOpenFileNameA
FindTextA
kernel32
SetEndOfFile
ExitProcess
lstrlenA
GetOEMCP
ExitThread
lstrlenW
SetHandleCount
LoadLibraryA
IsBadReadPtr
GetProcAddress
SetErrorMode
SetEvent
VirtualAllocEx
ReadFile
GetACP
ResetEvent
GetLastError
LoadLibraryExA
SetFilePointer
GetModuleHandleA
GetCommandLineW
GlobalAlloc
version
VerQueryValueA
VerInstallFileA
comctl32
ImageList_Destroy
ImageList_GetBkColor
ImageList_Draw
ImageList_DrawEx
shell32
SHGetFolderPathA
user32
GetCapture
WaitMessage
shlwapi
SHQueryValueExA
PathIsDirectoryA
SHSetValueA
PathGetCharTypeA
PathFileExistsA
SHGetValueA
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 493B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 4KB - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ddata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ