Static task
static1
Behavioral task
behavioral1
Sample
b15cd0b75254e35d4d32170b481a9281a9f287cdc5d6b98df49c310fcf21465f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b15cd0b75254e35d4d32170b481a9281a9f287cdc5d6b98df49c310fcf21465f.exe
Resource
win10v2004-20220812-en
General
-
Target
b15cd0b75254e35d4d32170b481a9281a9f287cdc5d6b98df49c310fcf21465f
-
Size
155KB
-
MD5
48a12ea7961bfee9e0e0177fe1ff6e30
-
SHA1
f3a848790b4380f2ff264c19a044edc65aed0a54
-
SHA256
b15cd0b75254e35d4d32170b481a9281a9f287cdc5d6b98df49c310fcf21465f
-
SHA512
903dbbcca168001d5560a83272323d0fa35ff2eeb7d189ab8bf55813273a67fc280a002f2bf3a62e167f268079eff070f10f6f0729c960d25851dca34a5ea45a
-
SSDEEP
3072:PkPFI/oMvoMeli5ZzdosCyvWO4ancTiYIwBa39sPNWTcwJ3mE:MPK/qMeU5ZzdofyvWe6TatsPNWHRv
Malware Config
Signatures
Files
-
b15cd0b75254e35d4d32170b481a9281a9f287cdc5d6b98df49c310fcf21465f.exe windows x86
719455ede6dfb8f60400ff23313d9806
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetProcAddress
CloseHandle
GetTempPathA
GetVersionExA
LoadLibraryA
RtlUnwind
CreateFileA
VirtualProtect
GetModuleHandleW
GetStartupInfoW
lstrlenW
crtdll
__GetMainArgs
exit
raise
signal
gdi32
CreateSolidBrush
BitBlt
SelectObject
DeleteObject
SetTextColor
CreateCompatibleDC
DeleteDC
CreateFontIndirectW
advapi32
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
user32
LoadIconW
GetWindowRect
ShowWindow
SetWindowLongW
LoadStringW
SendMessageW
GetDlgItem
wsprintfW
GetWindowLongW
MessageBoxW
ReleaseDC
GetDC
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 322B - Virtual size: 322B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc1 Size: 302B - Virtual size: 302B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE