Static task
static1
Behavioral task
behavioral1
Sample
4b789a4a095c66bd9aad325b0c7595c04cec9e72c25fe74b6ca25fac99635147.exe
Resource
win7-20220812-en
General
-
Target
4b789a4a095c66bd9aad325b0c7595c04cec9e72c25fe74b6ca25fac99635147
-
Size
177KB
-
MD5
6335c53ce83cd156b9f9840d778b0508
-
SHA1
ed16660ceebbe785d9e49ad65aa9a43f31fbd7c9
-
SHA256
4b789a4a095c66bd9aad325b0c7595c04cec9e72c25fe74b6ca25fac99635147
-
SHA512
1bc13b4e360c5308577b199834bad29a76b834cba227a0d3a7f2841073fcbd4dde5d6962124a2e2d0edbf0d13b94fa3eb288da57a89844fe9d7541c449c62d3f
-
SSDEEP
3072:firMdPkTsKtMRNzAWDmu2SXs6R8ewZp+pMRDxTXIIyvLU85Fsq:f+a8Y6MwWaZqvwZp+pMRxFyvLUYF
Malware Config
Signatures
Files
-
4b789a4a095c66bd9aad325b0c7595c04cec9e72c25fe74b6ca25fac99635147.exe windows x86
c2bf360823714705738a2a560c505c99
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdiplus
GdipGetImageWidth
GdipDisposeImage
ole32
CoGetMalloc
StringFromGUID2
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoTaskMemFree
kernel32
WideCharToMultiByte
ExitProcess
HeapSize
GetCalendarInfoW
GetModuleFileNameA
SetHandleCount
lstrcpynA
GetVersionExA
GetLocaleInfoA
IsDBCSLeadByte
Sleep
DeleteFileA
GetStringTypeW
FindResourceA
SystemTimeToFileTime
GetCurrentProcess
HeapCreate
MultiByteToWideChar
HeapDestroy
EnumResourceNamesA
GetCurrentProcessId
GetCPInfo
DeleteFileW
InitializeCriticalSection
ExpandEnvironmentStringsA
GetNumberFormatA
WaitForSingleObject
CreateDirectoryA
GetStringTypeA
GetVersion
GetStartupInfoA
GetTempPathA
GetTickCount
lstrcpynW
CompareStringA
QueryPerformanceCounter
GetFullPathNameW
GetFullPathNameA
Sections
.text Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ