Static task
static1
Behavioral task
behavioral1
Sample
1f7b0e57e797e55382c77aa51c25334da8f7d9a455beb2012a5d33745b5dcbba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1f7b0e57e797e55382c77aa51c25334da8f7d9a455beb2012a5d33745b5dcbba.exe
Resource
win10v2004-20220812-en
General
-
Target
1f7b0e57e797e55382c77aa51c25334da8f7d9a455beb2012a5d33745b5dcbba
-
Size
97KB
-
MD5
63318cb67597c34d4be9d8f3c2418541
-
SHA1
431cec73c9bbbeef34110f1086da26ce90b365a6
-
SHA256
1f7b0e57e797e55382c77aa51c25334da8f7d9a455beb2012a5d33745b5dcbba
-
SHA512
49613d0634aa2ee7d9a373915c7a764ce848b1386561d83b57c073b107a239100fc8924c3fc771908f6b72fd95bf4b3413b05f9d74bff6ff627a6936c561ecd9
-
SSDEEP
1536:IcL1sO2zP3AXuTXIB9xtcK/wV3XfytrNmlXiqOnU:j1oxzI8ekfytrg1inU
Malware Config
Signatures
Files
-
1f7b0e57e797e55382c77aa51c25334da8f7d9a455beb2012a5d33745b5dcbba.exe windows x86
6e1a930999c933a4e49c030813fe83a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
CharNextA
GetParent
TranslateMessage
GetSystemMetrics
GetDesktopWindow
gdi32
GetDeviceCaps
CreatePalette
GetPixel
GetStockObject
SetStretchBltMode
DeleteObject
CreateFontIndirectA
DeleteDC
SetMapMode
PatBlt
CreatePen
CreateSolidBrush
RestoreDC
SaveDC
SetTextAlign
SelectPalette
SetTextColor
GetTextMetricsA
GetObjectA
LineTo
CreateCompatibleDC
GetClipBox
RectVisible
SelectObject
GetNearestPaletteIndex
kernel32
GetCurrentThread
lstrlenA
GetCurrentThreadId
GetProcessHeap
GetCommandLineW
GetModuleHandleW
GetCommandLineA
GlobalFindAtomA
GetOEMCP
IsDebuggerPresent
GetCurrentProcessId
GetVersion
DeleteFileA
GetUserDefaultLangID
SetCurrentDirectoryA
RemoveDirectoryA
lstrlenW
GetWindowsDirectoryA
QueryPerformanceCounter
lstrcmpiW
GetConsoleOutputCP
MulDiv
lstrcmpiA
GetModuleHandleA
GetThreadLocale
GetCurrentProcess
GetTickCount
DeleteFileW
lstrcmpA
RemoveDirectoryW
CopyFileA
GetACP
GetDriveTypeA
ExitProcess
GlobalFindAtomW
VirtualAlloc
glu32
gluQuadricCallback
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ