Static task
static1
Behavioral task
behavioral1
Sample
4d303778de77012fa1b4e02f78768c92825c7a109f2233c2eccff61544f4a647.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4d303778de77012fa1b4e02f78768c92825c7a109f2233c2eccff61544f4a647.exe
Resource
win10v2004-20220812-en
General
-
Target
4d303778de77012fa1b4e02f78768c92825c7a109f2233c2eccff61544f4a647
-
Size
90KB
-
MD5
58a94c0c5db994b7386315575484aabb
-
SHA1
95d1679f5776cf3568b641b72735f9a362e892cc
-
SHA256
4d303778de77012fa1b4e02f78768c92825c7a109f2233c2eccff61544f4a647
-
SHA512
9e9443f74cf713499622d6bd34c33091c7cef3159e5db6fa40efa0a08f7b5b5c5bdcf54cfd50e5f64b9170dc72facccbd063aac030ea9fdf69d28bd95ff947ba
-
SSDEEP
1536:vFxzq+5hRpfvP7Ip4emVgY4rAHUDKeQtCXmTWl/xXmRAYD820Jj3q/rJ/iXpX6iL:dWp4emR4cHUmeQtCWT8/xIUJ3e1/iZD
Malware Config
Signatures
Files
-
4d303778de77012fa1b4e02f78768c92825c7a109f2233c2eccff61544f4a647.exe windows x86
d4bf8ae7c2b7421855c954dcd9d26dad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
_CIexp
_CIpow
fclose
floor
pow
strlen
fmod
sin
cos
abs
fabs
ceil
malloc
free
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
FreeLibrary
HeapFree
LoadLibraryA
GetProcAddress
CreateFileA
WriteFile
HeapAlloc
CloseHandle
DeleteFileA
HeapReAlloc
TlsAlloc
TlsSetValue
GetVersionExA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedCompareExchange
Sleep
InterlockedExchange
user32
CallWindowProcA
DestroyIcon
FillRect
GetIconInfo
DrawIconEx
gdi32
GetObjectType
DeleteObject
GetObjectA
DeleteDC
CreateCompatibleDC
SelectObject
BitBlt
GdiSetBatchLimit
GdiGetBatchLimit
GetStockObject
GetTextExtentPoint32A
CreateDIBSection
SetBkMode
SetTextAlign
SetBkColor
SetTextColor
TextOutA
SetStretchBltMode
SetBrushOrgEx
StretchBlt
GetDIBits
GetPixel
CreateFontIndirectA
GetTextMetricsA
CreateCompatibleBitmap
CreateBitmap
SetPixel
shell32
Shell_NotifyIconA
Sections
.code Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 345B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ