Static task
static1
Behavioral task
behavioral1
Sample
7cbdcb63baaefa281add5fc4e89a94648ccdbf2eaedf427d768f95230ad97841.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7cbdcb63baaefa281add5fc4e89a94648ccdbf2eaedf427d768f95230ad97841.exe
Resource
win10v2004-20220901-en
General
-
Target
7cbdcb63baaefa281add5fc4e89a94648ccdbf2eaedf427d768f95230ad97841
-
Size
100KB
-
MD5
1a8679f1b96ed2fd89c26939569109c0
-
SHA1
e98981c2a048ca46e9b56f0fdeda47303219382e
-
SHA256
7cbdcb63baaefa281add5fc4e89a94648ccdbf2eaedf427d768f95230ad97841
-
SHA512
99d0407dec0d8a776068d765300cdaa4af0050b297843d6b7540ebbb66bb86952336fe320390555eb0feeeb8f9a551d97c4a0b3fc69179fbf934784db270941e
-
SSDEEP
3072:IFd/A5MFhMAmWSag12OXAbDNmEHa0g+2g74qClxwx:WA5+mtBag14aL+2g74u
Malware Config
Signatures
Files
-
7cbdcb63baaefa281add5fc4e89a94648ccdbf2eaedf427d768f95230ad97841.exe windows x86
ce452f9aa68cabd86717b890aabc7b05
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
GetDesktopWindow
GetParent
CharNextA
GetSystemMetrics
GetDC
kernel32
GlobalFindAtomA
GetCurrentThreadId
GetCurrentProcess
GetWindowsDirectoryA
lstrcmpA
IsDebuggerPresent
GetConsoleOutputCP
lstrlenA
GetProcessHeap
GetVersion
RemoveDirectoryA
GetCommandLineW
GlobalFindAtomW
CopyFileA
GetUserDefaultLangID
VirtualAlloc
GetOEMCP
GetCurrentThread
GetTickCount
GetDriveTypeA
SetCurrentDirectoryA
GetACP
lstrcmpiW
GetCommandLineA
MulDiv
lstrlenW
GetStartupInfoA
DeleteFileW
GetCurrentProcessId
RemoveDirectoryW
GetModuleHandleW
lstrcmpiA
DeleteFileA
ExitProcess
GetThreadLocale
GetModuleHandleA
QueryPerformanceCounter
gdi32
SelectPalette
SaveDC
CreateSolidBrush
GetStockObject
PatBlt
RectVisible
LineTo
GetClipBox
CreatePalette
GetObjectA
GetTextMetricsA
SetStretchBltMode
DeleteDC
CreatePen
SetTextAlign
CreateCompatibleDC
SetTextColor
GetDeviceCaps
DeleteObject
SelectObject
RestoreDC
SetMapMode
CreateFontIndirectA
GetNearestPaletteIndex
GetPixel
glu32
gluQuadricCallback
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE