Static task
static1
Behavioral task
behavioral1
Sample
55fe80c6d9bfb56da64358d14f2470b46b19accf580708d1c40225df3c14af46.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
55fe80c6d9bfb56da64358d14f2470b46b19accf580708d1c40225df3c14af46.exe
Resource
win10v2004-20220812-en
General
-
Target
55fe80c6d9bfb56da64358d14f2470b46b19accf580708d1c40225df3c14af46
-
Size
156KB
-
MD5
0fa9255d8ba930a72d5bd2501897b34f
-
SHA1
2af2a8e38310a61e78ececdd7d129113c5e63101
-
SHA256
55fe80c6d9bfb56da64358d14f2470b46b19accf580708d1c40225df3c14af46
-
SHA512
d178d8ae00b1f1c20cf0d185909c83d19d4d05decfffbcb5e976d359b3b7348e09f8ee8209d9fe5601c88593e720fa15533ca2fd2c401c573eb82e041c1e2afe
-
SSDEEP
3072:w5VNcpvSpHkNEaI2ykg5OSbRkbCkOnfPa6k9RSqU61lQnGHgMfb1e57S7i:wvNyvS+I//5tbRWCkC6gcg
Malware Config
Signatures
Files
-
55fe80c6d9bfb56da64358d14f2470b46b19accf580708d1c40225df3c14af46.exe windows x86
ce50b3c9672109a6a3f7da0daa04f455
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoFreeUnusedLibraries
OleRegGetUserType
CoReleaseMarshalData
CoTaskMemFree
CreateStreamOnHGlobal
kernel32
VirtualAlloc
LoadLibraryExA
lstrlenA
GetCommandLineW
GetOEMCP
GetModuleHandleW
GetDateFormatA
lstrlenW
WideCharToMultiByte
GetProcAddress
GetACP
ExitProcess
GetModuleHandleA
GetCommandLineA
ExitThread
comctl32
ImageList_Create
ImageList_Add
ImageList_Draw
ImageList_DragShowNolock
ImageList_Remove
ImageList_Read
comdlg32
GetSaveFileNameA
FindTextA
GetOpenFileNameA
ChooseColorA
msvcrt
acos
pow
fabs
wcstol
cos
abs
mbstowcs
version
VerQueryValueA
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 893B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ