Static task
static1
Behavioral task
behavioral1
Sample
43238fa432508c66a22c9b7c4c41600a04223f165a179aa86e4a997791864e62.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
43238fa432508c66a22c9b7c4c41600a04223f165a179aa86e4a997791864e62.exe
Resource
win10v2004-20220812-en
General
-
Target
43238fa432508c66a22c9b7c4c41600a04223f165a179aa86e4a997791864e62
-
Size
262KB
-
MD5
0b50692649b21258ac072f33f0737543
-
SHA1
93f013731d6261705f507abf810e84796db045c3
-
SHA256
43238fa432508c66a22c9b7c4c41600a04223f165a179aa86e4a997791864e62
-
SHA512
fa797d5a7bfe7a5d9a7d32559471a0602011e46fc5d0a67d6c2c63fe2e3364b4c2220d8c48da20b8f388b18f8d7fc0ee99182e7ce6c20bac79869739de697a81
-
SSDEEP
6144:N3WUTSywOxGi1a4HLCATxcKj10JtTD90SSeZo5ZHcg:N3FqOTFrCAlf10vT2peOH8g
Malware Config
Signatures
Files
-
43238fa432508c66a22c9b7c4c41600a04223f165a179aa86e4a997791864e62.exe windows x86
58651b9c463e023ad1ded4a76ba2172b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strncpy
fabs
ceil
malloc
floor
free
memcpy
fseek
ftell
fread
fclose
_CIasin
_CItanh
_CIsqrt
_CIlog
_CIpow
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetTickCount
Sleep
HeapFree
HeapAlloc
QueryPerformanceCounter
TlsAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
HeapReAlloc
user32
PeekMessageA
TranslateMessage
DispatchMessageA
GetClientRect
ShowCursor
DestroyWindow
InvalidateRect
ShowWindow
DestroyIcon
FillRect
BeginPaint
EndPaint
DefWindowProcA
LoadIconA
RegisterClassExA
CreateWindowExA
gdi32
GetObjectType
DeleteObject
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
GetStockObject
winmm
timeEndPeriod
Sections
.code Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 295B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE