Static task
static1
Behavioral task
behavioral1
Sample
389307e94c390ac5b37f9bdc9488020920b595b020fee6fe9607f91b4b6b76f4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
389307e94c390ac5b37f9bdc9488020920b595b020fee6fe9607f91b4b6b76f4.exe
Resource
win10v2004-20220812-en
General
-
Target
389307e94c390ac5b37f9bdc9488020920b595b020fee6fe9607f91b4b6b76f4
-
Size
114KB
-
MD5
27ecf854049ebc546d4e56afec0c6347
-
SHA1
471b3e93412a8392deef8969dd4242c319c2d0aa
-
SHA256
389307e94c390ac5b37f9bdc9488020920b595b020fee6fe9607f91b4b6b76f4
-
SHA512
5eeaf7e775b0e199e78f6672dd494e4dbf6f64933358bfd42938317bdcf1ba35385cebfcf6d697d7c1308d632c7d1173bc8f229c0c9cc3be5cb47e0f71a8ccd9
-
SSDEEP
3072:kqJIK2UZ/YKP+SQmrXk2Ltq+4y2gkayg:kqOgZgfEk2Ltt4jf
Malware Config
Signatures
Files
-
389307e94c390ac5b37f9bdc9488020920b595b020fee6fe9607f91b4b6b76f4.exe windows x86
f949a9b8d6373ffa21f5262e003d363a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDesktopWindow
GetSystemMetrics
CharNextA
TranslateMessage
GetParent
kernel32
GetCurrentThread
GetOEMCP
RemoveDirectoryA
GetDriveTypeA
CopyFileA
GetThreadLocale
GetModuleHandleA
lstrlenA
QueryPerformanceCounter
GlobalFindAtomA
GetCurrentProcessId
GetCurrentThreadId
GetVersion
GlobalFindAtomW
GetProcessHeap
GetConsoleOutputCP
RemoveDirectoryW
GetTickCount
DeleteFileA
GetStartupInfoA
lstrcmpiW
GetWindowsDirectoryA
SetCurrentDirectoryA
IsDebuggerPresent
lstrcmpiA
GetACP
GetCurrentProcess
VirtualAlloc
VirtualFree
DeleteFileW
lstrlenW
lstrcmpA
GetModuleHandleW
GetCommandLineA
GetUserDefaultLangID
GetCommandLineW
MulDiv
gdi32
SaveDC
DeleteObject
SetStretchBltMode
SetMapMode
GetClipBox
SelectObject
GetTextMetricsA
SetTextColor
CreateSolidBrush
CreatePen
RestoreDC
PatBlt
GetDeviceCaps
CreatePalette
SetPixel
SetTextAlign
DeleteDC
CreateCompatibleDC
SelectPalette
CreateFontIndirectA
GetStockObject
GetPixel
GetObjectA
RectVisible
LineTo
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ