Static task
static1
Behavioral task
behavioral1
Sample
23d475019a36c099ef2f1a173e8ee82be97b319fbf3f0e58531d92b499545543.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
23d475019a36c099ef2f1a173e8ee82be97b319fbf3f0e58531d92b499545543.exe
Resource
win10v2004-20220812-en
General
-
Target
23d475019a36c099ef2f1a173e8ee82be97b319fbf3f0e58531d92b499545543
-
Size
117KB
-
MD5
0cf8f894aec95befd8fd7c8227798e1f
-
SHA1
af0ba0199296b1ca833013eb122f44c1d11cc722
-
SHA256
23d475019a36c099ef2f1a173e8ee82be97b319fbf3f0e58531d92b499545543
-
SHA512
4efe2bccf872055bd1000a0a9b159333a21d2b500eacf5b3f879c686a7142ac261a9178bbce2299118310f821e042331ccff318de096d6056900104a938d5d59
-
SSDEEP
1536:K3PV5OwMOMGfG1+QsPWUQ3YyEGHzBDuir0WswFvbPaO3lt1xt02TDyLHbwQWw:CV0BIR+VDPr0WswFras1xA7wQ
Malware Config
Signatures
Files
-
23d475019a36c099ef2f1a173e8ee82be97b319fbf3f0e58531d92b499545543.exe windows x86
1d4841910a49819bf692c8f6b0faaff4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDeviceCaps
PatBlt
CreatePalette
SetStretchBltMode
GetObjectA
SaveDC
CreateCompatibleDC
CreateSolidBrush
SelectPalette
GetStockObject
SetMapMode
GetTextMetricsA
RestoreDC
GetPixel
RectVisible
LineTo
DeleteObject
SetTextAlign
CreateFontIndirectA
DeleteDC
GetClipBox
SetTextColor
SelectObject
CreatePen
SetPixel
user32
GetSystemMetrics
TranslateMessage
CharNextA
GetDesktopWindow
GetParent
kernel32
CopyFileA
DeleteFileW
GetOEMCP
lstrcmpiW
GetCurrentProcessId
GetStartupInfoA
GetUserDefaultLangID
GetCurrentProcess
GetCurrentThread
MulDiv
GetACP
GetThreadLocale
GetProcessHeap
GetCommandLineA
GetVersion
DeleteFileA
GetConsoleOutputCP
GlobalFindAtomW
GetCurrentThreadId
lstrlenW
GetCommandLineW
QueryPerformanceCounter
GetWindowsDirectoryA
lstrlenA
GetTickCount
GetModuleHandleA
RemoveDirectoryA
VirtualAlloc
VirtualFree
GetDriveTypeA
lstrcmpA
RemoveDirectoryW
IsDebuggerPresent
GetModuleHandleW
lstrcmpiA
SetCurrentDirectoryA
GlobalFindAtomA
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ