Static task
static1
Behavioral task
behavioral1
Sample
9003dc0b230860a2e5e6a0c00fa27caa42ed39b9bbff3fbb39bd9b1797314b28.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9003dc0b230860a2e5e6a0c00fa27caa42ed39b9bbff3fbb39bd9b1797314b28.exe
Resource
win10v2004-20220901-en
General
-
Target
9003dc0b230860a2e5e6a0c00fa27caa42ed39b9bbff3fbb39bd9b1797314b28
-
Size
69KB
-
MD5
b2d87aa2ddc392186b38b2780d12af08
-
SHA1
3193e58bbc91044be13f3c856feeb146857f207f
-
SHA256
9003dc0b230860a2e5e6a0c00fa27caa42ed39b9bbff3fbb39bd9b1797314b28
-
SHA512
462acea3e3087529732d2fe60a70e99fc5719cbc6582c4a380a946cfe87140f9df7c6dce280bd5ee61320c44019cce72fda65c565b887b9b576b521b86cc45d1
-
SSDEEP
1536:F5XbSpzPF6ucLQMVwwf7jPhlk33hxkfaZo7kBifOPRLWF8xTp:F1Sp5GK07jZcgSiMrxd
Malware Config
Signatures
Files
-
9003dc0b230860a2e5e6a0c00fa27caa42ed39b9bbff3fbb39bd9b1797314b28.exe windows x86
3a0657dd310c0183215c56db28720943
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
fseek
ftell
fread
sprintf
fabs
ceil
malloc
floor
free
fclose
strlen
strcpy
strncpy
strcat
_stricmp
_CIpow
_CIatan2
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
GetProcAddress
FreeLibrary
LoadLibraryA
InitializeCriticalSection
TlsAlloc
GetVersionExA
GetCurrentProcessId
GetCurrentThreadId
CloseHandle
CreateFileA
SetFilePointer
SetEndOfFile
WriteFile
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
user32
GetPropA
RemovePropA
FillRect
GetIconInfo
DrawStateA
GetParent
GetClientRect
SendMessageA
InvalidateRect
CallWindowProcA
SetPropA
SetWindowLongA
DestroyWindow
ShowWindow
IsZoomed
GetWindowLongA
MoveWindow
ShowCursor
BeginPaint
EndPaint
DefWindowProcA
LoadIconA
RegisterClassExA
CreateWindowExA
ClipCursor
GetWindowRect
SetCursorPos
GetWindow
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadCursorA
DestroyIcon
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos
gdi32
GetObjectType
GetObjectA
DeleteObject
IntersectClipRect
GetStockObject
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
comdlg32
GetSaveFileNameA
GetOpenFileNameA
comctl32
CreateStatusWindowA
InitCommonControlsEx
winmm
timeEndPeriod
ole32
RevokeDragDrop
CoInitialize
Sections
.code Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 863B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE