Static task
static1
Behavioral task
behavioral1
Sample
896f9f3b2182f94565c2a5b865f71abcefd1ab95691a1f6504e907ccb20e77a3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
896f9f3b2182f94565c2a5b865f71abcefd1ab95691a1f6504e907ccb20e77a3.exe
Resource
win10v2004-20220812-en
General
-
Target
896f9f3b2182f94565c2a5b865f71abcefd1ab95691a1f6504e907ccb20e77a3
-
Size
636KB
-
MD5
24046cf3ff9f1590732af51d51991d50
-
SHA1
2f8dd70271e7ea8bca1aa6364c89201d6e9c64c0
-
SHA256
896f9f3b2182f94565c2a5b865f71abcefd1ab95691a1f6504e907ccb20e77a3
-
SHA512
8ffd27f0a11dade2b4e93f05359764c21950fc5da8216f7267aeb68efeb981c8959246a5749753b175ca27a1ec712c68cf85086c4c6181d4873774dce33342bc
-
SSDEEP
12288:PaWbWxrYcOgLAxB7iX/IH2wfR9e3nOLdypJPONcgyvK9aLP1d9//:zCduvxB7ivwjfR96nHpJPJQaLv9/
Malware Config
Signatures
Files
-
896f9f3b2182f94565c2a5b865f71abcefd1ab95691a1f6504e907ccb20e77a3.exe windows x86
e2055062fee1081240f6125a0f66bc67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
WaitForSingleObject
GetConsoleCP
HeapCreate
GlobalUnlock
GetTickCount
GetVersion
HeapReAlloc
CompareFileTime
CloseHandle
GetConsoleDisplayMode
GetSystemDefaultLangID
VirtualProtect
InterlockedExchange
GetCommandLineA
LocalSize
WaitForMultipleObjects
GetModuleHandleA
lstrlenA
SuspendThread
GetAtomNameA
gdi32
EndPath
FloodFill
EngLineTo
CreateICA
GetTextColor
GetFontData
EqualRgn
GetRgnBox
BeginPath
GetMetaFileA
GetStringBitmapA
DeleteObject
GetMetaRgn
CreatePalette
CreateFontA
AbortPath
DeleteDC
Ellipse
Escape
rastapi
DeviceConnect
AddPorts
PortClose
DeviceListen
DeviceDone
dhcpsapi
DhcpAddServer
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ