Static task
static1
Behavioral task
behavioral1
Sample
27ab680560aff9006a80d8335a48352ccb560a281f87a2d9d99eb6787576fe5a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
27ab680560aff9006a80d8335a48352ccb560a281f87a2d9d99eb6787576fe5a.exe
Resource
win10v2004-20220812-en
General
-
Target
27ab680560aff9006a80d8335a48352ccb560a281f87a2d9d99eb6787576fe5a
-
Size
138KB
-
MD5
00b4ecd97a88d8131476211621f45e00
-
SHA1
b421fc47615b3e8210fd1db7ed0c74617505e692
-
SHA256
27ab680560aff9006a80d8335a48352ccb560a281f87a2d9d99eb6787576fe5a
-
SHA512
0d5118ecbef9737989dd69f886205cbb4d2f560fafd82b5fe0c79f29600458e45a22cd8f72d70cebf40e217945efa24ba77b4e294266a2482346a1ccfd020b27
-
SSDEEP
3072:yNgfMJ4bCl0Ex9mQ3CS6oAKHY+pc3DwXNqCecTya:4gmpj1CSPhc3DwXNrec5
Malware Config
Signatures
Files
-
27ab680560aff9006a80d8335a48352ccb560a281f87a2d9d99eb6787576fe5a.exe windows x86
4005123b8f49aceef7e973f5c579d215
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetBrushOrgEx
SetDIBColorTable
DPtoLP
PatBlt
SaveDC
GetStockObject
SetStretchBltMode
EndPage
GetTextMetricsA
DeleteDC
GetBrushOrgEx
SetBkMode
SetMapMode
SelectPalette
GetDIBColorTable
SetColorSpace
PlayEnhMetaFile
EndDoc
EndPath
BitBlt
Chord
GetPaletteEntries
RectVisible
RestoreDC
StretchBlt
SetWindowExtEx
MoveToEx
CreatePatternBrush
SetBkColor
ScaleViewportExtEx
IntersectClipRect
GetDeviceCaps
OffsetViewportOrgEx
BeginPath
CreateBitmap
PtVisible
LineTo
DeleteObject
GetClipBox
ExcludeClipRect
MaskBlt
GetPixel
LPtoDP
UnrealizeObject
GetEnhMetaFilePaletteEntries
Rectangle
CreateRectRgn
StartPage
SelectClipPath
SelectObject
CreateCompatibleBitmap
SetViewportOrgEx
SetTextColor
GetDCOrgEx
SetROP2
CreatePen
user32
CharNextA
kernel32
lstrcmpiA
GetVersion
lstrlenW
GetCurrentThread
GlobalFindAtomA
GetCurrentThreadId
IsDebuggerPresent
DeleteFileA
GetCommandLineA
GetUserDefaultLangID
RemoveDirectoryA
SetLastError
GetModuleHandleA
GetProcessHeap
GetTickCount
GetCommandLineW
lstrcmpA
GetLastError
lstrcmpiW
GetModuleHandleW
SetCurrentDirectoryA
GetOEMCP
lstrlenA
GetThreadLocale
CopyFileA
MulDiv
GetCurrentProcess
GetCurrentProcessId
DeleteFileW
GetACP
GetConsoleOutputCP
GlobalFindAtomW
VirtualAlloc
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ