Static task
static1
Behavioral task
behavioral1
Sample
c880570bda9d70fb4deeb11a57fa0106f798eb7c7c4b3fa0c7defe63a51c3c18.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c880570bda9d70fb4deeb11a57fa0106f798eb7c7c4b3fa0c7defe63a51c3c18.exe
Resource
win10v2004-20220901-en
General
-
Target
c880570bda9d70fb4deeb11a57fa0106f798eb7c7c4b3fa0c7defe63a51c3c18
-
Size
168KB
-
MD5
1737512939f31034a0aa81eed488713a
-
SHA1
6bb2567cfb027b4fb11aab85f2e190c8d12fe0d2
-
SHA256
c880570bda9d70fb4deeb11a57fa0106f798eb7c7c4b3fa0c7defe63a51c3c18
-
SHA512
762fe353bdc32ca353c003371add316c3769202c6677f5b363d024dedfe47f6bd95c3e7b0bc6494dcbe7157ae317c744c08138304449bebe8b248b1a87cc0d7c
-
SSDEEP
3072:JgEA5VYGVc4oHbjy2HQ4D27CfqPxKStaT4W7UL1AeXF:JDA5VybjNG7Cfqc9kW7Ur
Malware Config
Signatures
Files
-
c880570bda9d70fb4deeb11a57fa0106f798eb7c7c4b3fa0c7defe63a51c3c18.exe windows x86
04883586816e94c9f3df08d1b9686b8d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetPixel
SetStretchBltMode
SetTextAlign
DeleteObject
CreateSolidBrush
LineTo
PatBlt
GetDeviceCaps
SaveDC
SelectObject
CreateFontIndirectA
SetMapMode
RectVisible
SetTextColor
GetClipBox
GetObjectA
DeleteDC
CreateCompatibleDC
SelectPalette
CreatePen
CreatePalette
GetStockObject
RestoreDC
GetTextMetricsA
user32
GetSystemMetrics
GetDC
TranslateMessage
GetDesktopWindow
GetParent
CharNextA
kernel32
GetCurrentProcessId
GetModuleHandleA
GetCommandLineA
GetVersion
CopyFileA
lstrcmpA
GetTickCount
DeleteFileW
GetOEMCP
GlobalFindAtomA
GetWindowsDirectoryA
GetCurrentThread
SetCurrentDirectoryA
GetDriveTypeA
lstrcmpiW
GetUserDefaultLangID
GetConsoleOutputCP
lstrlenA
GetThreadLocale
GlobalFindAtomW
lstrlenW
GetCurrentThreadId
GetCurrentProcess
GetStartupInfoA
MulDiv
GetCommandLineW
GetACP
GetModuleHandleW
RemoveDirectoryA
lstrcmpiA
QueryPerformanceCounter
DeleteFileA
VirtualAlloc
IsDebuggerPresent
VirtualFree
GetProcessHeap
glu32
gluNurbsCallback
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Xgyyseaa Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Utnulm F Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ