Static task
static1
Behavioral task
behavioral1
Sample
45103781ddb9d3b423ec5b608d4dadd413e2f9b5e348ce3a7b9a0cf91bc85b91.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
45103781ddb9d3b423ec5b608d4dadd413e2f9b5e348ce3a7b9a0cf91bc85b91.exe
Resource
win10v2004-20220812-en
General
-
Target
45103781ddb9d3b423ec5b608d4dadd413e2f9b5e348ce3a7b9a0cf91bc85b91
-
Size
298KB
-
MD5
93d103a6d55d332721fe187e10478b00
-
SHA1
e74258ab5f4723c8e10c78fbe07487e75a68903a
-
SHA256
45103781ddb9d3b423ec5b608d4dadd413e2f9b5e348ce3a7b9a0cf91bc85b91
-
SHA512
c9cacf2affeafdfdf28a9bafc6070bded5f877488ba6462682a4062d40cea815d0e867dcd5b7a5a9e00f663a6a221a0d94bddb1a3ee5a4f847087fd81de33de2
-
SSDEEP
6144:gJ5/qAWt0NnF018oyTv9FowCah93ZL3B3R9zkfg2RQeZcgviUblMA2I7xX:w5SI21Wv99Zz3zLkYJgPB2Ih
Malware Config
Signatures
Files
-
45103781ddb9d3b423ec5b608d4dadd413e2f9b5e348ce3a7b9a0cf91bc85b91.exe windows x86
2aaf6f91577b5bc86ef17ac0862d7c4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
sprintf
fabs
ceil
malloc
floor
free
memcpy
fseek
ftell
fread
fclose
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapFree
GetCurrentProcessId
HeapAlloc
InitializeCriticalSection
TlsAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
GetCurrentThreadId
CloseHandle
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
GlobalLock
GlobalUnlock
user32
GetWindow
SetActiveWindow
RemovePropA
SendMessageA
DestroyWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
GetForegroundWindow
GetWindowThreadProcessId
GetPropA
DestroyIcon
FillRect
IsWindowVisible
GetWindowLongA
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos
OpenClipboard
GetClipboardData
CloseClipboard
gdi32
DeleteObject
GetStockObject
GetObjectType
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
comdlg32
ChooseColorA
comctl32
InitCommonControlsEx
ole32
RevokeDragDrop
CoInitialize
Sections
.code Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 265B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ