Static task
static1
Behavioral task
behavioral1
Sample
f711abc3f16c072577cd298e4ff2d0db0438374b906c927193a82365b62a21c4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f711abc3f16c072577cd298e4ff2d0db0438374b906c927193a82365b62a21c4.exe
Resource
win10v2004-20220812-en
General
-
Target
f711abc3f16c072577cd298e4ff2d0db0438374b906c927193a82365b62a21c4
-
Size
185KB
-
MD5
91075b8a0c9e98d2241cde5e2928ccec
-
SHA1
05d9a27cd4953da49cb7c19d212c2657c1b796f6
-
SHA256
f711abc3f16c072577cd298e4ff2d0db0438374b906c927193a82365b62a21c4
-
SHA512
2a8a9c27e0d6b9e59c52a58aee2f512914eac732b28ccdb9e258f21cbac61cb956ad8962c9d370e2c509f457f2a94c2df067feb48f30cbf5973d7507df688ee0
-
SSDEEP
3072:e+olhqG8IpUqBv0dP/l4hbtDiMMQkCeAlt8fzbC:ejlhXCPt4zGoXeAlt8fzb
Malware Config
Signatures
Files
-
f711abc3f16c072577cd298e4ff2d0db0438374b906c927193a82365b62a21c4.exe windows x86
e3011fa0dd9bb47ff20e39a08dc34468
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysAllocStringLen
kernel32
lstrlenW
GetCommandLineW
GetCommandLineA
ExitProcess
GetModuleHandleW
GetModuleHandleA
GetProcAddress
LoadLibraryExA
VirtualAlloc
LoadLibraryA
GetVersionExA
IsBadReadPtr
VirtualAllocEx
gdi32
CreateCompatibleDC
GetCurrentPositionEx
CreatePenIndirect
user32
GetCapture
GetActiveWindow
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES99 Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES70 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES38 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES94 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES68 Size: 2KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES39 Size: 512B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES16 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES92 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ