Static task
static1
Behavioral task
behavioral1
Sample
01608fd10bc1b806bcd5ac1ba0bc0dbd5c768140020999d0fcc3a766b743575c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
01608fd10bc1b806bcd5ac1ba0bc0dbd5c768140020999d0fcc3a766b743575c.exe
Resource
win10v2004-20220812-en
General
-
Target
01608fd10bc1b806bcd5ac1ba0bc0dbd5c768140020999d0fcc3a766b743575c
-
Size
145KB
-
MD5
6fe5d71e642314421d453301fac29010
-
SHA1
bbd0cc3f53d40f3ba452196db44478740f588e6e
-
SHA256
01608fd10bc1b806bcd5ac1ba0bc0dbd5c768140020999d0fcc3a766b743575c
-
SHA512
04819313f9d0be016d9517640b0855a03350f76d92e302aea7f8727a3d345e7077d8369827321a9eba25e2f89c0824562733e0b1a7819fd6ac798ab56e641919
-
SSDEEP
3072:MHBG6Xkuwh2ntk2LzSV0aKs3jKcUBYixDbNSxYi4XIpXuoNX:MhGGS2ntkY1QKcGDbf4pXuoh
Malware Config
Signatures
Files
-
01608fd10bc1b806bcd5ac1ba0bc0dbd5c768140020999d0fcc3a766b743575c.exe windows x86
3d289df6b9c7102d3e84d76e331f7894
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
kernel32
GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetStartupInfoA
lstrlenA
LoadLibraryA
crtdll
__GetMainArgs
exit
raise
signal
ntdll
NtWaitForSingleObject
wininet
InternetQueryOptionA
gdi32
SetPixel
BitBlt
CreateCompatibleBitmap
SelectObject
DeleteObject
CreateCompatibleDC
DeleteDC
GetDeviceCaps
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
user32
LoadIconA
LoadStringA
SendMessageA
MessageBoxA
GetClientRect
InvalidateRect
EndPaint
BeginPaint
LoadCursorA
PostMessageA
DispatchMessageA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 338B - Virtual size: 338B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ