Static task
static1
Behavioral task
behavioral1
Sample
27a6b9c8b146990ce951c6b21db3a9aace8408098b04c23fb89ea715e024fede.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
27a6b9c8b146990ce951c6b21db3a9aace8408098b04c23fb89ea715e024fede.exe
Resource
win10v2004-20220901-en
General
-
Target
27a6b9c8b146990ce951c6b21db3a9aace8408098b04c23fb89ea715e024fede
-
Size
110KB
-
MD5
4e85977f4bc43631ae81c43953d72160
-
SHA1
0d14e781135ed34f22824c9ceecc3915c41eafa2
-
SHA256
27a6b9c8b146990ce951c6b21db3a9aace8408098b04c23fb89ea715e024fede
-
SHA512
f2b2aa0c93b2a806d41fb60704f7080f39798054e350efa6e95681f13751264012913e4916911ac79dd5bc5184fae6648284766d04a7d679232efbbf9aa3bf70
-
SSDEEP
3072:tYnE2YxuWoQgZFvnDstv690onwzcMCGes:2E2YxuWaFf2v6bn6e
Malware Config
Signatures
Files
-
27a6b9c8b146990ce951c6b21db3a9aace8408098b04c23fb89ea715e024fede.exe windows x86
f6ddee2d4f38c455a234aea1f5268603
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
CopyFileA
DeleteFileA
lstrcmpiW
GetCommandLineA
lstrlenA
RemoveDirectoryA
GlobalFindAtomA
GetWindowsDirectoryA
lstrcmpA
lstrlenW
QueryPerformanceCounter
GetModuleHandleA
RemoveDirectoryW
GetSystemTime
FindClose
VirtualAlloc
VirtualFree
gdi32
SetStretchBltMode
CreatePalette
SelectPalette
SelectObject
DeleteDC
GetDeviceCaps
SetMapMode
GetStockObject
RestoreDC
CreateFontIndirectA
SetTextColor
GetPixel
SetTextAlign
CreateSolidBrush
GetClipBox
SaveDC
RectVisible
GetTextMetricsA
DeleteObject
GetObjectA
CreateCompatibleDC
user32
TranslateMessage
CharNextA
GetDesktopWindow
GetParent
GetDC
GetSystemMetrics
glu32
gluNurbsCallback
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE