?ulBHRmLfcohtYcbeFupagW@@YGPANF@Z
Static task
static1
Behavioral task
behavioral1
Sample
57c49af9476a01d918067c638a033db05b3c7f442215626551ca7a5ca9ea2d8f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
57c49af9476a01d918067c638a033db05b3c7f442215626551ca7a5ca9ea2d8f.exe
Resource
win10v2004-20220812-en
General
-
Target
57c49af9476a01d918067c638a033db05b3c7f442215626551ca7a5ca9ea2d8f
-
Size
154KB
-
MD5
d31a1030042e1ad82f71c71d4ee5666e
-
SHA1
653b9dfbf0b0809cb11c01773920989909902d72
-
SHA256
57c49af9476a01d918067c638a033db05b3c7f442215626551ca7a5ca9ea2d8f
-
SHA512
76efce5ddd2b18356c7a775f26f0c0cfe3a532ebbcca272a30d70d8a71800e3df7a87a2780d0aa2463d66926d7ef2fb03ea4b2dfb91b6e64fe7a243149f38810
-
SSDEEP
3072:z7zTt3q/UZLGCGVaQWNai6QluIOvwp5mAFRvQ/SE9XoOpzOIqoD+7Y4Fp:1PGCGVaQWsi6Qg4p5rq/SUpzOIq17Y4
Malware Config
Signatures
Files
-
57c49af9476a01d918067c638a033db05b3c7f442215626551ca7a5ca9ea2d8f.exe windows x86
f2c8ddacd581c4a1886f0f618d450b39
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
GetStartupInfoA
GetProcAddress
GetFullPathNameW
CancelWaitableTimer
GetComputerNameExA
SetCommMask
GetModuleHandleA
GetStartupInfoW
DeleteFileW
GetTickCount
LoadLibraryA
lstrcmpiA
HeapSize
gdi32
GetTextAlign
GetStockObject
GetDeviceCaps
SetBkColor
GetRgnBox
CreateCompatibleBitmap
CreateBitmapIndirect
CreateRectRgn
EnumFontFamiliesW
user32
CreateCaret
SetWindowTextW
CharUpperBuffA
SetWindowTextA
GetClipCursor
EnumWindows
InvertRect
wsprintfW
ShowWindow
LoadCursorW
SetActiveWindow
DrawStateW
Exports
Exports
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 613B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ