Static task
static1
Behavioral task
behavioral1
Sample
0b93af3d3e81d972fd6bfec5d4daaa6e35b7167bfae5eae65d9ae962ad48ceb3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0b93af3d3e81d972fd6bfec5d4daaa6e35b7167bfae5eae65d9ae962ad48ceb3.exe
Resource
win10v2004-20220812-en
General
-
Target
0b93af3d3e81d972fd6bfec5d4daaa6e35b7167bfae5eae65d9ae962ad48ceb3
-
Size
171KB
-
MD5
646cb98142469dfeba2ba8c707e4d30a
-
SHA1
803c75fffb7b113394ebd50c386b5c895387bdc4
-
SHA256
0b93af3d3e81d972fd6bfec5d4daaa6e35b7167bfae5eae65d9ae962ad48ceb3
-
SHA512
8fc5e54dc412d8407537d1583dccefceab704bcd26efb3c35e60593ea4fa21e7ff71b8679f0331c8e6ae3cf9df80770197dcd79c8f9c04060a678d8d03cfa522
-
SSDEEP
3072:1Qxf9oeYixUBpaZy6gYXHojW4hxka/Uo2JvG8EspxN2Uk:CZZNyNYCJxRclFppa5
Malware Config
Signatures
Files
-
0b93af3d3e81d972fd6bfec5d4daaa6e35b7167bfae5eae65d9ae962ad48ceb3.exe windows x86
754f5d0c131df9962f481b7f14747b3c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
VirtualAlloc
GetCurrentThread
GetTickCount
GetModuleHandleA
VirtualFree
GetOEMCP
GetUserDefaultLangID
SetCurrentDirectoryA
QueryPerformanceCounter
DeleteFileA
DeleteFileW
RemoveDirectoryA
GlobalFindAtomA
GetCommandLineW
lstrlenA
GetThreadLocale
lstrlenW
GetModuleHandleW
GetVersion
GlobalFindAtomW
GetACP
lstrcmpiW
GetCurrentProcessId
CopyFileA
GetCurrentThreadId
GetWindowsDirectoryA
GetCurrentProcess
lstrcmpiA
GetDriveTypeA
MulDiv
IsDebuggerPresent
lstrcmpA
GetCommandLineA
GetConsoleOutputCP
gdi32
LineTo
GetClipBox
RestoreDC
GetStockObject
GetObjectA
DeleteObject
GetTextMetricsA
GetPixel
CreatePen
SetTextColor
CreateSolidBrush
SetMapMode
CreateFontIndirectA
PatBlt
GetDeviceCaps
SelectObject
DeleteDC
RectVisible
CreateCompatibleDC
SaveDC
SetTextAlign
SelectPalette
CreatePalette
SetStretchBltMode
user32
GetDesktopWindow
GetSystemMetrics
TranslateMessage
GetParent
CharNextA
GetDC
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Vkljufik Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Ltudgc M Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ