Static task
static1
Behavioral task
behavioral1
Sample
c83fd2f21d90441890ede8c325811e0b2360bc02c97acbe8d9bd4ef4adac4eb0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c83fd2f21d90441890ede8c325811e0b2360bc02c97acbe8d9bd4ef4adac4eb0.exe
Resource
win10v2004-20220901-en
General
-
Target
c83fd2f21d90441890ede8c325811e0b2360bc02c97acbe8d9bd4ef4adac4eb0
-
Size
107KB
-
MD5
090f257b7af842976c2acf15d8d02bb4
-
SHA1
507887c528475b512f4148c42ef0e3a2909c1cb0
-
SHA256
c83fd2f21d90441890ede8c325811e0b2360bc02c97acbe8d9bd4ef4adac4eb0
-
SHA512
630dd88b21306b32681b621412add73450a847042e0a75b18397f08ea98b227b1d08510d1bf44ca7f8ae87e06a68499bd6f9fc13bf747d65e922f595d873ab51
-
SSDEEP
3072:U6jDy8BwsfpK48FkXH7uiK+9oRI4SKPBuEQS+:TzKs8NSunRII0
Malware Config
Signatures
Files
-
c83fd2f21d90441890ede8c325811e0b2360bc02c97acbe8d9bd4ef4adac4eb0.exe windows x86
c84efd8d5d6341e154e43ed637db4fb2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetWindowsDirectoryA
RemoveDirectoryA
GetCurrentThreadId
GetProcessHeap
GetCurrentProcessId
GetACP
GetConsoleOutputCP
GetModuleHandleW
lstrcmpA
lstrlenA
lstrcmpiA
QueryPerformanceCounter
GetModuleHandleA
SetCurrentDirectoryA
IsDebuggerPresent
MulDiv
DeleteFileW
GetVersion
CopyFileA
GetCurrentThread
GlobalFindAtomW
GetDriveTypeA
GetUserDefaultLangID
GetStartupInfoA
GetCommandLineW
lstrcmpiW
lstrlenW
GetCurrentProcess
DeleteFileA
GlobalFindAtomA
RemoveDirectoryW
GetCommandLineA
GetOEMCP
ExitProcess
VirtualAlloc
GetThreadLocale
VirtualFree
user32
CharNextA
TranslateMessage
GetParent
GetDC
GetDesktopWindow
GetSystemMetrics
gdi32
GetDeviceCaps
RectVisible
GetTextMetricsA
SelectPalette
SetStretchBltMode
PatBlt
DeleteDC
CreateCompatibleDC
DeleteObject
LineTo
SelectObject
GetPixel
CreatePalette
GetClipBox
RestoreDC
GetStockObject
SetMapMode
CreateFontIndirectA
SetTextColor
GetObjectA
CreateSolidBrush
SetTextAlign
SaveDC
CreatePen
GetNearestPaletteIndex
glu32
gluQuadricCallback
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ