Static task
static1
Behavioral task
behavioral1
Sample
92fb193606cf8ff02c10bc959ac6f147a88ec0894adc29254d707db476d9fccb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
92fb193606cf8ff02c10bc959ac6f147a88ec0894adc29254d707db476d9fccb.exe
Resource
win10v2004-20220812-en
General
-
Target
92fb193606cf8ff02c10bc959ac6f147a88ec0894adc29254d707db476d9fccb
-
Size
155KB
-
MD5
38d58899749e9d3dca9743c1784d595f
-
SHA1
440d4dc13afc265046dcb0c29b9db446c0b24490
-
SHA256
92fb193606cf8ff02c10bc959ac6f147a88ec0894adc29254d707db476d9fccb
-
SHA512
52f194d5fe468127f5586fc7b9aa9072d6fc984c36e184aba951d3fc1780b8163cf3c90e05b2defcccb6aa9d02fd5e5ab4f3aa819b745d1f1299e87ea79768c8
-
SSDEEP
3072:jPUpt3040J+J4P6L22L8sUL2tBdk80OAJQz/+9:jPUv040J+uP2L83CtBdJ0vQ2
Malware Config
Signatures
Files
-
92fb193606cf8ff02c10bc959ac6f147a88ec0894adc29254d707db476d9fccb.exe windows x86
a5fe7eb3df5ccde56e51bc42684fd2b6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextColor
GetBkColor
GetMapMode
GetTextExtentPoint32W
CreateFontIndirectW
CreateSolidBrush
GetStockObject
CreatePatternBrush
DeleteDC
rpcrt4
RpcStringBindingComposeW
RpcStringFreeW
RpcSmDestroyClientContext
RpcBindingFromStringBindingW
shell32
SHGetFolderPathW
DragQueryFileW
DragFinish
CommandLineToArgvW
SHFileOperationW
user32
wvsprintfA
kernel32
GetTempPathW
SetLastError
WaitForSingleObject
FindFirstVolumeW
HeapSetInformation
GlobalFree
DeleteCriticalSection
GetTickCount
MultiByteToWideChar
lstrlenA
GlobalHandle
FormatMessageW
InterlockedDecrement
InterlockedIncrement
CreateFileW
CloseHandle
oleaut32
VariantInit
DispGetIDsOfNames
VarUI4FromDec
SysFreeString
Sections
.text Size: 74KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ