Static task
static1
Behavioral task
behavioral1
Sample
d4d9ec80dd6db85a5800d9b6aa5721c02c502bbe8a5dcbf1f6d9c1fb9c057594.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4d9ec80dd6db85a5800d9b6aa5721c02c502bbe8a5dcbf1f6d9c1fb9c057594.exe
Resource
win10v2004-20220901-en
General
-
Target
d4d9ec80dd6db85a5800d9b6aa5721c02c502bbe8a5dcbf1f6d9c1fb9c057594
-
Size
309KB
-
MD5
6e17ce71dc6a08d9af61d701a8afbe40
-
SHA1
51993a20746bdf9767f9c1a11d5acfdb767bf5d0
-
SHA256
d4d9ec80dd6db85a5800d9b6aa5721c02c502bbe8a5dcbf1f6d9c1fb9c057594
-
SHA512
8eab12e74379e43e9cfea5f85195544aa3d6bd4439b3107fbcf7049e6a18cf74c14b6b0cdff442cdbb8167e38d66f101ca767e3010b7036f618e07d441d35b31
-
SSDEEP
6144:8gFMMbsd0Pp4ORTbuq6DkskVa2XkQykfHrN6cDIvgFHXgUo:bFNId0p4OBuq6DaxmkvrXMvwo
Malware Config
Signatures
Files
-
d4d9ec80dd6db85a5800d9b6aa5721c02c502bbe8a5dcbf1f6d9c1fb9c057594.exe windows x86
5bd2d90097b9e76e13e3181ac8549953
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
fabs
ceil
malloc
floor
free
fclose
memcpy
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
HeapAlloc
HeapFree
TlsAlloc
WriteFile
CloseHandle
SetFilePointer
HeapReAlloc
CreateFileA
ReadFile
user32
MessageBoxA
SetMenu
DestroyMenu
GetMenuItemInfoA
SetMenuItemInfoA
FillRect
DestroyIcon
gdi32
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
GetObjectType
CreateDIBSection
DeleteObject
SelectObject
BitBlt
CreateBitmap
SetPixel
GetStockObject
Sections
.code Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 226B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ