Static task
static1
Behavioral task
behavioral1
Sample
5c65ddc2eddcf95196cc0c8c6dde923d99f9043a37f8d0c12c8acbe165c59c52.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5c65ddc2eddcf95196cc0c8c6dde923d99f9043a37f8d0c12c8acbe165c59c52.exe
Resource
win10v2004-20220812-en
General
-
Target
5c65ddc2eddcf95196cc0c8c6dde923d99f9043a37f8d0c12c8acbe165c59c52
-
Size
114KB
-
MD5
005efb11cc66ce1edb568f27c6057380
-
SHA1
49d9a44c4eaa1363bca9b13668a3cf6fc0d7ff21
-
SHA256
5c65ddc2eddcf95196cc0c8c6dde923d99f9043a37f8d0c12c8acbe165c59c52
-
SHA512
d7b3d5825134793cc4557c0c5de76d10f19f55b3c55adfb0d5978ab672db92a0fe44f19a16a57ae893c68864b324b80612450cf1db8ad864eab76afb6f481009
-
SSDEEP
3072:05qZG2EAfmUBwykxGphbBFjiI5+QrEivDC3o4fNDGnRU:mHJ7gwnAbBFjTP+Rv
Malware Config
Signatures
Files
-
5c65ddc2eddcf95196cc0c8c6dde923d99f9043a37f8d0c12c8acbe165c59c52.exe windows x86
022784d65ed5bb2bc2a201c07d24cd2d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
libgimpui-2.0-0
gimp_ui_init
gimp_window_set_transient
gimp_zoom_preview_get_source
gimp_zoom_preview_get_type
gimp_zoom_preview_new
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__argc
__argv
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_fmode
_initterm
_iob
_lock
_onexit
_unlock
_winmajor
abort
calloc
exit
fprintf
free
frexp
fwrite
malloc
memcpy
memset
signal
strlen
strncmp
vfprintf
libgimp-2.0-0
gimp_displays_flush
gimp_drawable_detach
gimp_drawable_flush
gimp_drawable_get
gimp_drawable_is_rgb
gimp_drawable_mask_intersect
gimp_drawable_merge_shadow
gimp_drawable_update
gimp_install_procedure
gimp_main
gimp_pixel_rgn_get_rect
gimp_pixel_rgn_init
gimp_pixel_rgn_set_rect
gimp_plugin_menu_register
gimp_procedural_db_get_data
gimp_procedural_db_set_data
gimp_progress_init
gimp_progress_update
gimp_tile_cache_ntiles
gimp_tile_width
libgimpbase-2.0-0
gimp_locale_directory
libgimpwidgets-2.0-0
gimp_dialog_get_type
gimp_dialog_new
gimp_dialog_run
gimp_float_adjustment_update
gimp_int_adjustment_update
gimp_int_combo_box_connect
gimp_int_combo_box_get_active
gimp_int_combo_box_get_type
gimp_int_combo_box_new
gimp_preview_draw_buffer
gimp_preview_invalidate
gimp_scale_entry_new
gimp_standard_help_func
gimp_table_attach_aligned
gtk_box_new
libglib-2.0-0
g_free
g_log
g_try_malloc
libgobject-2.0-0
g_signal_connect_data
g_type_check_instance_cast
libgtk-win32-2.0-0
gtk_box_get_type
gtk_box_pack_start
gtk_container_get_type
gtk_container_set_border_width
gtk_dialog_get_content_area
gtk_dialog_get_type
gtk_dialog_set_alternative_button_order
gtk_table_get_type
gtk_table_new
gtk_table_set_col_spacings
gtk_table_set_row_spacings
gtk_widget_destroy
gtk_widget_show
gtk_window_get_type
libintl-8
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_gettext
libintl_textdomain
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE