Static task
static1
Behavioral task
behavioral1
Sample
6abf1e1c573ea96aa9e04f9b3b05435aa52658e4f6c9e87115e50d011cfec82f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6abf1e1c573ea96aa9e04f9b3b05435aa52658e4f6c9e87115e50d011cfec82f.exe
Resource
win10v2004-20220901-en
General
-
Target
6abf1e1c573ea96aa9e04f9b3b05435aa52658e4f6c9e87115e50d011cfec82f
-
Size
113KB
-
MD5
90b611e596779f6bfafd2d7119ac05ae
-
SHA1
b798ac295890068cb0015b4dc8068ba8749e5d10
-
SHA256
6abf1e1c573ea96aa9e04f9b3b05435aa52658e4f6c9e87115e50d011cfec82f
-
SHA512
a4eaa3bde9f42b44c286b8af64a44d0b2a2b7b9221f17d12f9b24099446b8d4577f642e600e6b386fd54434ee1ca5a3bfa110a39846d24ec1f463c62e14f84cb
-
SSDEEP
1536:Xt9egAhZJZROfuJ8cluZtSeLwX38urTlcBe2DHmnm6vwC3Ar1JW3ipsXTiJawJnT:XtAvhv3J8CuWFX35xroGntQ5SiJawJ2
Malware Config
Signatures
Files
-
6abf1e1c573ea96aa9e04f9b3b05435aa52658e4f6c9e87115e50d011cfec82f.exe windows x86
1475f05d6e821494758d1f01ec2959bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
GetDesktopWindow
CharNextA
GetSystemMetrics
GetParent
TranslateMessage
gdi32
LineTo
RectVisible
SetStretchBltMode
SelectPalette
SetTextAlign
GetObjectA
GetStockObject
CreateSolidBrush
CreateCompatibleDC
GetPixel
CreateFontIndirectA
RestoreDC
SelectObject
SaveDC
GetTextMetricsA
CreatePalette
GetClipBox
SetMapMode
DeleteDC
SetTextColor
GetDeviceCaps
kernel32
GlobalFindAtomA
GetWindowsDirectoryA
CopyFileA
lstrcmpiW
GetModuleHandleA
VirtualAlloc
GetSystemTime
DeleteFileA
lstrlenA
VirtualFree
lstrcmpiA
lstrcmpA
GetCommandLineA
QueryPerformanceCounter
RemoveDirectoryA
RemoveDirectoryW
FindClose
lstrlenW
glu32
gluNurbsCallback
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE