Static task
static1
Behavioral task
behavioral1
Sample
629c88ae74d1aff16ad4e2426e4b5e5893023ca5abb0690f0e49de904e1fd4f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
629c88ae74d1aff16ad4e2426e4b5e5893023ca5abb0690f0e49de904e1fd4f8.exe
Resource
win10v2004-20220812-en
General
-
Target
629c88ae74d1aff16ad4e2426e4b5e5893023ca5abb0690f0e49de904e1fd4f8
-
Size
148KB
-
MD5
06bf618f5e55592d41ef97065210d754
-
SHA1
60380091f30b48c2e2091d7d1f6f2c54d32c712a
-
SHA256
629c88ae74d1aff16ad4e2426e4b5e5893023ca5abb0690f0e49de904e1fd4f8
-
SHA512
3304786ce60abd7582e91874129e2f1f927a83b5a9bb7a0814011fbf65c1738562341cc7105c1ca00d123b83c4278bccf4e51ec633d5c671a3dfebc893d969ac
-
SSDEEP
1536:AuiQ2y0M2TOvLeN/uYw6mBU+ImFjD1zOjNjs0dLBanWE4LRc8zBp4EIi/+tYutZr:1BLeN/ZXlmBZqxsSBTA4BGEIruEZa6/
Malware Config
Signatures
Files
-
629c88ae74d1aff16ad4e2426e4b5e5893023ca5abb0690f0e49de904e1fd4f8.exe windows x86
be510338ac5b6e7fe5b355108789b39d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
libgimpui-2.0-0
gimp_layer_combo_box_new
gimp_ui_init
gimp_window_set_transient
kernel32
DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt
__getmainargs
__p___argc
__p___argv
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
_winmajor
abort
atexit
calloc
fclose
fgets
floor
free
fwrite
log10
memcpy
pow
signal
sscanf
vfprintf
libgimp-2.0-0
gimp_context_get_gradient
gimp_displays_flush
gimp_drawable_detach
gimp_drawable_get
gimp_drawable_get_image
gimp_drawable_get_tile
gimp_drawable_has_alpha
gimp_drawable_is_gray
gimp_drawable_is_indexed
gimp_drawable_is_rgb
gimp_drawable_mask_bounds
gimp_drawable_offsets
gimp_gradient_get_uniform_samples
gimp_image_convert_rgb
gimp_image_get_selection
gimp_install_procedure
gimp_main
gimp_plugin_menu_register
gimp_procedural_db_get_data
gimp_procedural_db_set_data
gimp_progress_init
gimp_progress_update
gimp_rgn_iterate2
gimp_selection_bounds
gimp_tile_cache_ntiles
gimp_tile_height
gimp_tile_ref
gimp_tile_unref
gimp_tile_width
libgimpbase-2.0-0
gimp_locale_directory
libgimpwidgets-2.0-0
gimp_dialog_new
gimp_int_combo_box_connect
gimp_int_combo_box_get_active
gimp_int_combo_box_get_type
gimp_int_combo_box_prepend
gimp_preview_area_draw
gimp_preview_area_fill
gimp_preview_area_get_type
gimp_preview_area_new
gimp_standard_help_func
libgdk-win32-2.0-0
gdk_draw_line
gdk_event_request_motions
gdk_window_clear_area
libglib-2.0-0
g_fopen
g_free
g_getenv_utf8
g_malloc0
g_print
g_random_int_range
libgobject-2.0-0
g_signal_connect_data
g_type_check_instance_cast
libgtk-win32-2.0-0
gtk_adjustment_get_type
gtk_adjustment_new
gtk_adjustment_set_value
gtk_box_get_type
gtk_box_pack_start
gtk_check_button_new_with_label
gtk_container_add
gtk_container_get_type
gtk_container_set_border_width
gtk_dialog_get_type
gtk_dialog_set_alternative_button_order
gtk_dialog_set_response_sensitive
gtk_drawing_area_new
gtk_frame_get_type
gtk_frame_new
gtk_frame_set_shadow_type
gtk_grab_add
gtk_grab_remove
gtk_hbox_new
gtk_label_new
gtk_main
gtk_main_quit
gtk_misc_get_type
gtk_misc_set_alignment
gtk_spin_button_get_type
gtk_spin_button_new
gtk_spin_button_set_numeric
gtk_table_attach
gtk_table_get_type
gtk_table_new
gtk_table_set_col_spacings
gtk_table_set_row_spacings
gtk_toggle_button_get_active
gtk_toggle_button_get_type
gtk_toggle_button_set_active
gtk_vbox_new
gtk_widget_destroy
gtk_widget_get_style
gtk_widget_queue_draw
gtk_widget_set_events
gtk_widget_set_sensitive
gtk_widget_set_size_request
gtk_widget_show
gtk_window_get_type
intl
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_fprintf
libintl_gettext
libintl_printf
libintl_textdomain
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE