Static task
static1
Behavioral task
behavioral1
Sample
732dee6531423a40fd388841418c5b0eb5fe931a642924672449c64e226c1622.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
732dee6531423a40fd388841418c5b0eb5fe931a642924672449c64e226c1622.exe
Resource
win10v2004-20220812-en
General
-
Target
732dee6531423a40fd388841418c5b0eb5fe931a642924672449c64e226c1622
-
Size
262KB
-
MD5
a34d3ee72673b9622d88f546e4bba847
-
SHA1
467f0779d4d744bd8f7fd4b6274c12c6912ee800
-
SHA256
732dee6531423a40fd388841418c5b0eb5fe931a642924672449c64e226c1622
-
SHA512
dc657104095a8267e2acb88bb518893c396ac1e8d018f26daaed7b17e564c61a8f681d169bffdbdd4e559f0f32d698e088b8bb0847d4a6b98835f814a21eab3c
-
SSDEEP
3072:wQZxqk+SO8bOHsjvLHGANWwEFQUObMXkRc4/nkKr+5PXzUrhOyLu5C:/BVGKvnWvCVavwrYk
Malware Config
Signatures
Files
-
732dee6531423a40fd388841418c5b0eb5fe931a642924672449c64e226c1622.exe windows x86
b45d7fb85beae78a20ab2fd6ea1b31d2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
GetDeviceCaps
GetTextExtentPointA
GetTextMetricsA
SelectObject
CreateFontIndirectA
kernel32
TlsGetValue
InitializeCriticalSection
RaiseException
GetCPInfoExW
TlsSetValue
FreeEnvironmentStringsA
GetACP
GetStdHandle
GetStartupInfoA
GetEnvironmentStrings
WriteFile
LeaveCriticalSection
FreeEnvironmentStringsW
MultiByteToWideChar
GetEnvironmentStringsW
GetFileType
GetThreadLocale
InterlockedExchange
EnumResourceTypesA
SetHandleCount
HeapSize
GetVersionExA
WideCharToMultiByte
GetOEMCP
GetCPInfo
GetCommandLineW
QueryPerformanceCounter
lstrlenW
EnterCriticalSection
GetLocaleInfoA
DeleteCriticalSection
GetTickCount
GetLastError
InterlockedIncrement
UnhandledExceptionFilter
GetCurrentProcessId
ole32
CoGetMalloc
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
msimg32
AlphaBlend
TransparentBlt
Sections
.text Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ