Static task
static1
Behavioral task
behavioral1
Sample
c4ba3ca8d33b88d7919f00c80a7f9ec733098490802d78c73f8518575ca40a2c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c4ba3ca8d33b88d7919f00c80a7f9ec733098490802d78c73f8518575ca40a2c.exe
Resource
win10v2004-20220901-en
General
-
Target
c4ba3ca8d33b88d7919f00c80a7f9ec733098490802d78c73f8518575ca40a2c
-
Size
114KB
-
MD5
7b62c19eab5c6c2aca29772619d59021
-
SHA1
516243e9069ec60c6d5687d59ad08aad5d93cd58
-
SHA256
c4ba3ca8d33b88d7919f00c80a7f9ec733098490802d78c73f8518575ca40a2c
-
SHA512
04eeceda5b7ac2763d82f272693ec302ba8e6400181a95f939e3851b0a7d06c041da18d7d077afecfb2f06275be68e3dc8c11a9b96188e0a46609ed55f407132
-
SSDEEP
1536:+4hJU5OPpzjqXYi7rn/m8Tzb1f/Uwpr47b1lUTqyDNbsV1501CJhHy3:v0OPonxswpr4FlUTBNwV1IyS3
Malware Config
Signatures
Files
-
c4ba3ca8d33b88d7919f00c80a7f9ec733098490802d78c73f8518575ca40a2c.exe windows x86
5a2bd70676613f7e804a6a05fcc64a3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
IsDebuggerPresent
QueryPerformanceCounter
GetCommandLineA
GetStartupInfoA
GetCurrentThreadId
lstrcmpA
GlobalFindAtomA
CopyFileA
MulDiv
GetVersion
GetCurrentProcessId
GetCommandLineW
GetModuleHandleW
GetProcessHeap
lstrcmpiA
SetCurrentDirectoryA
GetThreadLocale
GetCurrentThread
GetModuleHandleA
GetUserDefaultLangID
GlobalFindAtomW
GetTickCount
GetOEMCP
lstrlenW
lstrcmpiW
RemoveDirectoryA
DeleteFileW
GetConsoleOutputCP
GetWindowsDirectoryA
GetACP
GetCurrentProcess
RemoveDirectoryW
DeleteFileA
VirtualAlloc
VirtualFree
gdi32
SetMapMode
CreateCompatibleDC
SelectObject
RectVisible
LineTo
CreatePen
PatBlt
GetDeviceCaps
SetTextAlign
GetTextMetricsA
DeleteObject
SetStretchBltMode
CreatePalette
GetObjectA
GetPixel
CreateFontIndirectA
SetTextColor
GetStockObject
RestoreDC
SelectPalette
CreateSolidBrush
GetClipBox
DeleteDC
SaveDC
SetPixel
user32
CharNextA
GetDesktopWindow
GetParent
TranslateMessage
GetSystemMetrics
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ