Static task
static1
Behavioral task
behavioral1
Sample
cf044177d4f669e3bf1e7eef6740a32e050488645f8e158271b0546efb31e663.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf044177d4f669e3bf1e7eef6740a32e050488645f8e158271b0546efb31e663.exe
Resource
win10v2004-20220901-en
General
-
Target
cf044177d4f669e3bf1e7eef6740a32e050488645f8e158271b0546efb31e663
-
Size
285KB
-
MD5
1111bf8778caaed4d48ae36e1f78fd7d
-
SHA1
bdcd64bad79ac2732104d9f299c97232df1f4206
-
SHA256
cf044177d4f669e3bf1e7eef6740a32e050488645f8e158271b0546efb31e663
-
SHA512
eacc816773db57a09b65ae47726582ddd760476374c535a347dd7dd41f48126e8648e3dd314804edd25f0c20a00544e0ef0ef849484b4a05fd26e2fd0f859a9a
-
SSDEEP
6144:XfNRdtlTivGm0nNcQE/e6BdVgJ9Y39Akxcisy/Ky:X1DTivGAJ/esvgPiAkxcK/r
Malware Config
Signatures
Files
-
cf044177d4f669e3bf1e7eef6740a32e050488645f8e158271b0546efb31e663.exe windows x86
d4bf8ae7c2b7421855c954dcd9d26dad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
_CIexp
_CIpow
fclose
floor
pow
strlen
fmod
sin
cos
abs
fabs
ceil
malloc
free
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
FreeLibrary
HeapFree
LoadLibraryA
GetProcAddress
CreateFileA
WriteFile
HeapAlloc
CloseHandle
DeleteFileA
HeapReAlloc
TlsAlloc
TlsSetValue
GetVersionExA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedCompareExchange
Sleep
InterlockedExchange
user32
CallWindowProcA
DestroyIcon
FillRect
GetIconInfo
DrawIconEx
gdi32
GetObjectType
DeleteObject
GetObjectA
DeleteDC
CreateCompatibleDC
SelectObject
BitBlt
GdiSetBatchLimit
GdiGetBatchLimit
GetStockObject
GetTextExtentPoint32A
CreateDIBSection
SetBkMode
SetTextAlign
SetBkColor
SetTextColor
TextOutA
SetStretchBltMode
SetBrushOrgEx
StretchBlt
GetDIBits
GetPixel
CreateFontIndirectA
GetTextMetricsA
CreateCompatibleBitmap
CreateBitmap
SetPixel
shell32
Shell_NotifyIconA
Sections
.code Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 345B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ