Static task
static1
Behavioral task
behavioral1
Sample
f97770eb15a0d2f11b39f6634818295214aefd7ed6e6f77a8c4ca88078df470d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f97770eb15a0d2f11b39f6634818295214aefd7ed6e6f77a8c4ca88078df470d.exe
Resource
win10v2004-20220812-en
General
-
Target
f97770eb15a0d2f11b39f6634818295214aefd7ed6e6f77a8c4ca88078df470d
-
Size
176KB
-
MD5
26b5cc8cd8109193d418931558a59481
-
SHA1
4534fd6503ebed527b708534f65a81c8ce9d2dab
-
SHA256
f97770eb15a0d2f11b39f6634818295214aefd7ed6e6f77a8c4ca88078df470d
-
SHA512
48070490ea06f3749653e2f0ac30e8fc008b9e09ca7b2b965fb12707ed3aa1f09dc79152e98ac931e59ae45182d4e52bb5817b0be403ff375a136e531f35db6b
-
SSDEEP
3072:wDs7+PbLiKjuLslVP/x687OcAtX1XQJguo6zTNV34dsVNQq9sSGix0EpwPphknpL:2s7+6KjMsvPp7zEXF4canIyQq9bp6ha1
Malware Config
Signatures
Files
-
f97770eb15a0d2f11b39f6634818295214aefd7ed6e6f77a8c4ca88078df470d.exe windows x86
6de6f3f683d52e532b9423a1d65c186b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
sprintf
fabs
ceil
malloc
floor
free
memcpy
fseek
ftell
fread
fclose
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
HeapFree
HeapAlloc
InitializeCriticalSection
TlsAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
WideCharToMultiByte
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
CreateFileA
ReadFile
user32
GetWindow
SetActiveWindow
RemovePropA
SendMessageA
DestroyWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
DestroyIcon
FillRect
gdi32
DeleteObject
GetStockObject
GetObjectType
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
comctl32
InitCommonControlsEx
ole32
CoUninitialize
CoInitialize
RevokeDragDrop
Sections
.code Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ