Static task
static1
Behavioral task
behavioral1
Sample
52e4fce3295deb3f10e1828c701a6dff2cded278ce6f980c6fbfc937aa4b3017.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
52e4fce3295deb3f10e1828c701a6dff2cded278ce6f980c6fbfc937aa4b3017.exe
Resource
win10v2004-20220812-en
General
-
Target
52e4fce3295deb3f10e1828c701a6dff2cded278ce6f980c6fbfc937aa4b3017
-
Size
115KB
-
MD5
dc8f01f64247aae3a24a5b4033317d81
-
SHA1
08e37596d75ce97a61ecee47a81cfadf78208edd
-
SHA256
52e4fce3295deb3f10e1828c701a6dff2cded278ce6f980c6fbfc937aa4b3017
-
SHA512
6314a7a0bb17671250e0c6a4f7e10896fa554d48eaa5a51fd5da9ebb3d12fd3cf98cb0a2da469478ac4c72c5611cc6314e903dd1ad6065b6884de1a4592afa53
-
SSDEEP
3072:mQN9DQ76JCBLcHOSpw3QitzwATmDIyHx4G6ndlFyVv6/:7AYtEQgzCDIyHx6dl
Malware Config
Signatures
Files
-
52e4fce3295deb3f10e1828c701a6dff2cded278ce6f980c6fbfc937aa4b3017.exe windows x86
06849769a4f486a7c5a842efe3fdf441
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
GetDesktopWindow
CharNextA
GetSystemMetrics
GetParent
gdi32
CreatePen
GetStockObject
GetObjectA
PatBlt
SelectPalette
CreateFontIndirectA
RectVisible
SaveDC
GetClipBox
SelectObject
CreateSolidBrush
CreatePalette
LineTo
SetStretchBltMode
SetTextColor
GetDeviceCaps
SetMapMode
CreateCompatibleDC
DeleteObject
GetTextMetricsA
DeleteDC
RestoreDC
GetPixel
SetTextAlign
SetPixel
kernel32
GetProcessHeap
RemoveDirectoryA
GetCurrentProcessId
GetThreadLocale
lstrlenA
GetCommandLineW
GetTickCount
CopyFileA
SetCurrentDirectoryA
GetOEMCP
GetCurrentThreadId
GetVersion
lstrcmpiW
GetCommandLineA
GetModuleHandleA
GetConsoleOutputCP
GlobalFindAtomW
GlobalFindAtomA
IsDebuggerPresent
GetUserDefaultLangID
lstrlenW
lstrcmpiA
GetModuleHandleW
GetACP
DeleteFileW
DeleteFileA
GetCurrentThread
GetCurrentProcess
GetStartupInfoA
GetWindowsDirectoryA
VirtualAlloc
VirtualFree
GetDriveTypeA
MulDiv
lstrcmpA
QueryPerformanceCounter
RemoveDirectoryW
glu32
gluQuadricCallback
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ