Static task
static1
Behavioral task
behavioral1
Sample
85a28e330073e5a3f1ba5c7f04f828d40e2c5a1dfb197204e185556785c1fe19.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
85a28e330073e5a3f1ba5c7f04f828d40e2c5a1dfb197204e185556785c1fe19.exe
Resource
win10v2004-20221111-en
General
-
Target
85a28e330073e5a3f1ba5c7f04f828d40e2c5a1dfb197204e185556785c1fe19
-
Size
263KB
-
MD5
276858dbb51c8ee677b653a94f7546a3
-
SHA1
cb3e9763c1ebf5dee49a186ce83498eae92d4b7e
-
SHA256
85a28e330073e5a3f1ba5c7f04f828d40e2c5a1dfb197204e185556785c1fe19
-
SHA512
c0aee637f8733ed36cc021998040d4f74614790b7e5a3332ce53b6c844350786301fcd212a0118996bccf1124fed9e6350edd4f9c559d6ae5f7429377999bf5b
-
SSDEEP
6144:eNe3o8NpNjTTM1+XHKton+4Kq5FHV/7VYUyxp:2Co8NDjXoUq6SKB8
Malware Config
Signatures
Files
-
85a28e330073e5a3f1ba5c7f04f828d40e2c5a1dfb197204e185556785c1fe19.exe windows x86
626307d6707dafd2b28bd80436740452
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetPixel
CreateCompatibleDC
CreateSolidBrush
ExtFloodFill
DeleteDC
SelectObject
DeleteObject
user32
SetWindowWord
SetMenu
SendMessageA
RegisterClassExA
PostQuitMessage
MoveWindow
MessageBoxA
ShowWindow
LoadIconA
LoadCursorA
GetSystemMetrics
GetSysColor
GetMessageA
EndPaint
DispatchMessageA
DefWindowProcA
TranslateMessage
LoadMenuA
UpdateWindow
CreateWindowExA
BeginPaint
kernel32
CreateFileA
CloseHandle
WriteFile
WinExec
VirtualProtect
Sleep
RtlMoveMemory
ReadFile
LoadLibraryA
GetModuleHandleA
GetLastError
GetFileSize
GetCommandLineA
ExitProcess
CreateThread
comctl32
CreateStatusWindowA
InitCommonControls
comdlg32
GetOpenFileNameA
GetSaveFileNameA
shell32
DragQueryFileA
ShellAboutA
oleaut32
SysFreeString
SysAllocStringByteLen
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 253KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ