Static task
static1
Behavioral task
behavioral1
Sample
001ce05e09ccead5f88384dcebfbd10af243d43f8aba57ab6d81931c52c9dbdc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
001ce05e09ccead5f88384dcebfbd10af243d43f8aba57ab6d81931c52c9dbdc.exe
Resource
win10v2004-20220812-en
General
-
Target
001ce05e09ccead5f88384dcebfbd10af243d43f8aba57ab6d81931c52c9dbdc
-
Size
104KB
-
MD5
0a8e3880b2f3df06d2d4ea83ef511352
-
SHA1
c784a79949d2600a3fa720b2866f490a36039331
-
SHA256
001ce05e09ccead5f88384dcebfbd10af243d43f8aba57ab6d81931c52c9dbdc
-
SHA512
8daf14e8d9c8e097cdbf56edfd0cbae13cca127446edfae72e2ec1452c92cbecfe85895a04e3757205b089f20af5e338afc8f7ff44fd83e7370a84e5af5fd0dc
-
SSDEEP
1536:3GbVNCPK9mEbDna9AK9LfI3sYA2qzwjGuClMraQ7nza28tsfhqBKEfVO39EE4gdt:U9B01qs4tHuDz2phqE4Vjfpxet
Malware Config
Signatures
Files
-
001ce05e09ccead5f88384dcebfbd10af243d43f8aba57ab6d81931c52c9dbdc.exe windows x86
e108d8584f8d74edace9acbd62fc4b0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDesktopWindow
GetParent
TranslateMessage
CharNextA
GetSystemMetrics
GetDC
kernel32
lstrlenA
lstrcmpiA
lstrcmpiW
GetWindowsDirectoryA
QueryPerformanceCounter
lstrcmpA
RemoveDirectoryA
GetCommandLineA
lstrlenW
CopyFileA
GetSystemTime
DeleteFileA
GlobalFindAtomA
RemoveDirectoryW
FindClose
GetModuleHandleA
VirtualAlloc
VirtualFree
gdi32
RestoreDC
GetStockObject
CreateCompatibleDC
GetObjectA
SetTextAlign
SetTextColor
LineTo
RectVisible
GetClipBox
CreatePalette
SetMapMode
SaveDC
DeleteObject
GetDeviceCaps
CreateSolidBrush
CreateFontIndirectA
SelectPalette
DeleteDC
SetStretchBltMode
GetPixel
glu32
gluNurbsCallback
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bhxdfso Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE