Static task
static1
Behavioral task
behavioral1
Sample
c4033b03a6b81df5f42adedcdd46d318d9dd4282fbc11ccc2ee0529db894ebb7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c4033b03a6b81df5f42adedcdd46d318d9dd4282fbc11ccc2ee0529db894ebb7.exe
Resource
win10v2004-20220901-en
General
-
Target
c4033b03a6b81df5f42adedcdd46d318d9dd4282fbc11ccc2ee0529db894ebb7
-
Size
392KB
-
MD5
768d301195371940c5fd78f05de010de
-
SHA1
20c6d25a512d44f0383ad26edea822babe2fc005
-
SHA256
c4033b03a6b81df5f42adedcdd46d318d9dd4282fbc11ccc2ee0529db894ebb7
-
SHA512
c0ec24bfe35cec970ac842c8affbeecadde1aae3f193e26d48fea881c0ed8b627fd7b3dca531c39d1b9d07c9e21372f33581b83556094dd614055cb709b20ba4
-
SSDEEP
12288:AuQiFyVFs9I0Rd8OBDGIFaw1KfBQumE1tO3JD/eqq2jRr71WtL:A2FW+9I0wOZGIH6zPo/eqp9rhG
Malware Config
Signatures
Files
-
c4033b03a6b81df5f42adedcdd46d318d9dd4282fbc11ccc2ee0529db894ebb7.exe windows x86
51cc867a15a34da8540b5d70d2ba2951
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetTickCount
InterlockedIncrement
Sleep
VirtualFree
InterlockedIncrement
Sleep
VirtualFree
msimg32
AlphaBlend
GradientFill
ole32
OleDraw
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
IsValidPtrIn
IsValidPtrOut
CoTaskMemFree
CoTaskMemAlloc
ProgIDFromCLSID
StringFromCLSID
CoCreateInstance
CoLockObjectExternal
CoDisconnectObject
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
CoGetMalloc
CoUninitialize
CoInitialize
advapi32
SetTokenInformation
SetSecurityDescriptorDacl
RegSetValueExW
RegSetValueExA
RegQueryValueExW
Sections
.text Size: 1024B - Virtual size: 877B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 386KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ