Static task
static1
Behavioral task
behavioral1
Sample
5206544d48fdebb6c53b41c01b826a74018986c5baf5799939dcb3d1c06c5353.exe
Resource
win7-20220812-en
General
-
Target
5206544d48fdebb6c53b41c01b826a74018986c5baf5799939dcb3d1c06c5353
-
Size
605KB
-
MD5
51580f36c89f953736584f1d6879d1f0
-
SHA1
22a85aebc38e11d14f99c7334a398bba1d426dd6
-
SHA256
5206544d48fdebb6c53b41c01b826a74018986c5baf5799939dcb3d1c06c5353
-
SHA512
857218090f8f73e4c7485584e989f1b046f131623f8fe815b30abb224e80fbdc1992ae048c537598ec6df562b67699e054370fdfa02c951bfef3e8419379825f
-
SSDEEP
12288:MhPD7KChnA4tK1BC22MNWxyxHrF8vnphuBPQRihae:a7n3cBKMN4wBUphCAGae
Malware Config
Signatures
Files
-
5206544d48fdebb6c53b41c01b826a74018986c5baf5799939dcb3d1c06c5353.exe windows x86
2c20524cbeee69a9ca4457e60e39bd32
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetBinaryTypeA
FindClose
GetModuleHandleA
GetTempPathW
CreateFileW
GetTempPathA
CloseHandle
GetBinaryTypeW
GetModuleHandleW
LoadLibraryA
CreateFileA
GetFileType
GetStartupInfoA
user32
DrawTextW
GetWindowTextA
DestroyWindow
IsWindowVisible
ShowWindow
DeleteMenu
CloseWindow
BeginPaint
DrawTextA
CloseClipboard
GetWindow
GetWindowTextW
EnableWindow
DefWindowProcA
GetWindowRect
EmptyClipboard
ReleaseDC
GetDC
DefWindowProcW
CreateWindowExA
IsWindowEnabled
gdi32
FrameRgn
CreateRectRgn
CreateRoundRectRgn
GetStockObject
BitBlt
CreateFontIndirectA
FillRgn
GetDeviceCaps
CreateCompatibleBitmap
CreateFontIndirectW
CreatePolygonRgn
CreateSolidBrush
DeleteObject
CombineRgn
CreateCompatibleDC
oleaut32
SafeArrayCreate
CreateErrorInfo
SetErrorInfo
SysAllocString
GetErrorInfo
SafeArrayCopy
SysAllocStringLen
SysAllocStringByteLen
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcmp
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE