Static task
static1
Behavioral task
behavioral1
Sample
23806ffd33388d7bcc73020eae71131813405ea8f6507a770c415bd2d25e82b3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
23806ffd33388d7bcc73020eae71131813405ea8f6507a770c415bd2d25e82b3.exe
Resource
win10v2004-20220812-en
General
-
Target
23806ffd33388d7bcc73020eae71131813405ea8f6507a770c415bd2d25e82b3
-
Size
150KB
-
MD5
ae8f185b43da790e682541bb4432aee4
-
SHA1
0283c6725c95c1a67360cb18083413d5606f1e0c
-
SHA256
23806ffd33388d7bcc73020eae71131813405ea8f6507a770c415bd2d25e82b3
-
SHA512
46eed874911b733d7e587ff822471b309155058c26d5886f3a92986489967c722039db95183c50767b21c2880490297a9b5f8b2da2e2bc8303060683451bad86
-
SSDEEP
3072:Ct+39G7+smitIq/454Zal4gnXyEd3w03gKI7ZH6nLueXJixpFsIHzi1sM:73QZrtk5jl95dLewyy0nTusM
Malware Config
Signatures
Files
-
23806ffd33388d7bcc73020eae71131813405ea8f6507a770c415bd2d25e82b3.exe windows x86
9a42d81d1e5946356c94e4b6abfc897d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextColor
GetBkColor
GetMapMode
GetTextExtentPoint32W
CreateFontIndirectW
CreateSolidBrush
GetStockObject
CreatePatternBrush
DeleteDC
ole32
CoCreateGuid
StringFromCLSID
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
OleLockRunning
StringFromGUID2
CoAllowSetForegroundWindow
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoInitializeSecurity
CoSetProxyBlanket
CoInitializeEx
CoUninitialize
CoTaskMemFree
CoGetClassObject
rpcrt4
RpcStringBindingComposeW
RpcStringFreeW
RpcSmDestroyClientContext
RpcBindingFromStringBindingW
comdlg32
GetFileTitleW
kernel32
GetLocaleInfoW
ExpandEnvironmentStringsA
GetCurrentThread
LZOpenFileW
CreateProcessA
HeapAlloc
GetProcessHeap
HeapFree
GetVersionExA
SizeofResource
LockResource
LoadResource
FindResourceA
oleaut32
LHashValOfNameSys
GetRecordInfoFromTypeInfo
VarUI4FromDec
SysFreeString
Sections
.text Size: 101KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 270B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ