Static task
static1
Behavioral task
behavioral1
Sample
891fc5214bcc1305d3b78a0372be0e01d813ea954fa15aee6dcb8ea63fba64ef.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
891fc5214bcc1305d3b78a0372be0e01d813ea954fa15aee6dcb8ea63fba64ef.exe
Resource
win10v2004-20220901-en
General
-
Target
891fc5214bcc1305d3b78a0372be0e01d813ea954fa15aee6dcb8ea63fba64ef
-
Size
208KB
-
MD5
b0b0dfc52f365375260c7f81fd5b30d3
-
SHA1
968933782bda59a4927df5a4f2579ec7e446b8e1
-
SHA256
891fc5214bcc1305d3b78a0372be0e01d813ea954fa15aee6dcb8ea63fba64ef
-
SHA512
b5104a129622d3aea816f246d9aaa2ad0506e1cdb8402871b077b724a19f00c7daa175f0f54c71a321326cf905152920134875ba6bd17ac8b132f90fe140feed
-
SSDEEP
6144:WeEKe+6gpRG/A7sp/G+k0OocfTFf90D1a8Jn:NMOsp/G+jmTFV0Ba8Jn
Malware Config
Signatures
Files
-
891fc5214bcc1305d3b78a0372be0e01d813ea954fa15aee6dcb8ea63fba64ef.exe windows x86
5e453976134279ba3c896173ef1d19dc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExA
WindowFromPoint
IsWindowVisible
BeginPaint
EndPaint
SetWindowTextA
LoadIconA
LoadCursorA
gdi32
GetTextColor
FrameRgn
CreateFontIndirectA
DeleteObject
SetRectRgn
kernel32
GetTickCount
GetPrivateProfileStringA
GetThreadLocale
GetLastError
HeapDestroy
RtlUnwind
SetFileAttributesA
GetStartupInfoA
GetProcAddress
FreeLibrary
DeleteCriticalSection
LeaveCriticalSection
LoadLibraryA
EnterCriticalSection
InitializeCriticalSection
GetCurrentProcess
GetStdHandle
HeapAlloc
HeapCreate
GetEnvironmentStrings
Sections
.text Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ