Static task
static1
Behavioral task
behavioral1
Sample
0a61d115864f2fd3545c24df3e968d4781299a25b4bd78ed24858120e7c2cecf.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0a61d115864f2fd3545c24df3e968d4781299a25b4bd78ed24858120e7c2cecf.exe
Resource
win10v2004-20220812-en
General
-
Target
0a61d115864f2fd3545c24df3e968d4781299a25b4bd78ed24858120e7c2cecf
-
Size
130KB
-
MD5
49aea3e06ffa86260f4cfae9076a9296
-
SHA1
86942988e9b8cfa4f0b28b78cdc985d6d1332bd5
-
SHA256
0a61d115864f2fd3545c24df3e968d4781299a25b4bd78ed24858120e7c2cecf
-
SHA512
e9895e37c170a631f9b37a67878be9cb7d081204667db34bd8476328e735988ca2140b87af71097a9eaa4288308f7a45376f9686ae49bf8b04d7d2309734a2db
-
SSDEEP
3072:yHgjPLFm3YIb5fpuL5NWOvaIBMEIapMNe2yJJx:fjPLQPVUXZaIybeRJJx
Malware Config
Signatures
Files
-
0a61d115864f2fd3545c24df3e968d4781299a25b4bd78ed24858120e7c2cecf.exe windows x86
0f8619cc75d12e56053e5fd213586d49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
libgimpui-2.0-0
gimp_proc_view_new
gimp_ui_init
kernel32
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt
__getmainargs
__p___argc
__p___argv
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
_winmajor
abort
atexit
calloc
free
fwrite
localtime
memcpy
signal
strcmp
strftime
strlen
strncpy
strrchr
strstr
vfprintf
libgimp-2.0-0
gimp_destroy_paramdefs
gimp_destroy_params
gimp_install_procedure
gimp_main
gimp_plugin_icon_register
gimp_plugin_menu_register
gimp_procedural_db_proc_info
gimp_run_procedure
libgimpbase-2.0-0
gimp_locale_directory
libgimpwidgets-2.0-0
gimp_browser_get_type
gimp_browser_new
gimp_browser_set_widget
gimp_browser_show_message
gimp_dialog_new
gimp_standard_help_func
libglib-2.0-0
g_free
g_locale_to_utf8
g_log
g_malloc0_n
g_return_if_fail_warning
g_strdup
g_strdup_printf
libgobject-2.0-0
g_object_unref
g_signal_connect_data
g_signal_handlers_block_matched
g_signal_handlers_unblock_matched
g_type_check_instance_cast
libgtk-win32-2.0-0
gtk_box_get_type
gtk_box_pack_start
gtk_cell_renderer_text_new
gtk_container_add
gtk_container_get_type
gtk_container_set_border_width
gtk_dialog_get_type
gtk_label_get_type
gtk_label_new
gtk_label_set_text
gtk_list_store_append
gtk_list_store_clear
gtk_list_store_get_type
gtk_list_store_new
gtk_list_store_set
gtk_main
gtk_main_quit
gtk_notebook_append_page
gtk_notebook_get_type
gtk_notebook_new
gtk_scrolled_window_get_type
gtk_scrolled_window_new
gtk_scrolled_window_set_policy
gtk_scrolled_window_set_shadow_type
gtk_tree_model_get
gtk_tree_model_get_iter
gtk_tree_model_get_iter_first
gtk_tree_model_get_path
gtk_tree_model_get_type
gtk_tree_model_iter_children
gtk_tree_model_iter_next
gtk_tree_path_down
gtk_tree_path_free
gtk_tree_path_new_first
gtk_tree_path_next
gtk_tree_path_up
gtk_tree_selection_get_selected
gtk_tree_selection_select_iter
gtk_tree_selection_set_mode
gtk_tree_sortable_get_type
gtk_tree_sortable_set_sort_column_id
gtk_tree_store_append
gtk_tree_store_clear
gtk_tree_store_get_type
gtk_tree_store_new
gtk_tree_store_set
gtk_tree_view_append_column
gtk_tree_view_column_new_with_attributes
gtk_tree_view_column_set_sort_column_id
gtk_tree_view_columns_autosize
gtk_tree_view_expand_to_path
gtk_tree_view_get_model
gtk_tree_view_get_selection
gtk_tree_view_get_type
gtk_tree_view_new_with_model
gtk_tree_view_scroll_to_cell
gtk_widget_destroy
gtk_widget_set_size_request
gtk_widget_show
intl
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_gettext
libintl_ngettext
libintl_textdomain
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 284B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE