Static task
static1
Behavioral task
behavioral1
Sample
2c2e7ce2683c9efbaea65d8d9a0c17622a7bade0d937c2d47141e636268125a8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2c2e7ce2683c9efbaea65d8d9a0c17622a7bade0d937c2d47141e636268125a8.exe
Resource
win10v2004-20220901-en
General
-
Target
2c2e7ce2683c9efbaea65d8d9a0c17622a7bade0d937c2d47141e636268125a8
-
Size
36KB
-
MD5
92e1b26c5dc8ea4191cbedcdcf133911
-
SHA1
61e53e0c1319a67445d91c366c1cef6330d6175a
-
SHA256
2c2e7ce2683c9efbaea65d8d9a0c17622a7bade0d937c2d47141e636268125a8
-
SHA512
03646e6ed020242d7ccd19e2815a9cdd53c33dcbe550211b83af002ec079987b86c0da6b1ffb07d41f156ce7ab8451e7789d662dd038a92f9c1bed75aa471a73
-
SSDEEP
768:Y4MyzONfeFYPugKKhcwrk4Rx5KtjvLlJX:YheFgZrRRMTxZ
Malware Config
Signatures
Files
-
2c2e7ce2683c9efbaea65d8d9a0c17622a7bade0d937c2d47141e636268125a8.exe windows x86
30568615ddf834ddb01d71e32bff1f27
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesA
LoadLibraryA
ntdll
RtlDumpResource
user32
SetUserObjectSecurity
ole32
PropSysAllocString
CoFreeLibrary
advapi32
SaferCreateLevel
gdi32
StrokeAndFillPath
SetROP2
SetMapperFlags
RoundRect
RemoveFontResourceW
Rectangle
UnrealizeObject
PathToRegion
GetTextColor
GetROP2
GetMapMode
GetDeviceCaps
GdiSetBatchLimit
GdiGetBatchLimit
PtInRegion
AbortPath
AddFontResourceW
CombineRgn
CreateRoundRectRgn
EnableEUDC
FillPath
rasapi32
RasSetAutodialEnableA
d3dxof
DirectXFileCreate
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 662B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ