Static task
static1
Behavioral task
behavioral1
Sample
c4df818400adb3dd5eb0ddc205e7fc09c3b7308b013ef99e39e472d01431f825.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c4df818400adb3dd5eb0ddc205e7fc09c3b7308b013ef99e39e472d01431f825.exe
Resource
win10v2004-20221111-en
General
-
Target
c4df818400adb3dd5eb0ddc205e7fc09c3b7308b013ef99e39e472d01431f825
-
Size
159KB
-
MD5
53d69e3db3fdc1174ca3863291af57d4
-
SHA1
9d31e1d011d6dbd8bfffb86f0a278464d9ea3746
-
SHA256
c4df818400adb3dd5eb0ddc205e7fc09c3b7308b013ef99e39e472d01431f825
-
SHA512
438a3bc5ca360c91f3693e76a8e81bcf832c58a6d09d8adcda85cbd5a155271b5a83aa7d00dc642b64821d7ae2e116b92070e45f6c2a79d8f856b04d744bbd92
-
SSDEEP
3072:c2IpJ+CTcQfRPoKVY7Ml6YbPZ/eF/J8PkFBr/CsZnSD:PEJzVYV4ml5Z6
Malware Config
Signatures
Files
-
c4df818400adb3dd5eb0ddc205e7fc09c3b7308b013ef99e39e472d01431f825.exe windows x86
0f0e3d334fa2b50389e35f4da7a384b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
FindClose
GetFileType
LoadLibraryA
GetBinaryTypeA
GetTempPathW
GetModuleHandleA
GetBinaryTypeW
GetTempPathA
CloseHandle
CreateFileW
CreateFileA
GetStartupInfoA
user32
GetWindowRect
DeleteMenu
GetWindow
IsWindowEnabled
IsWindowVisible
DestroyWindow
EmptyClipboard
DefWindowProcA
CloseClipboard
ShowWindow
DrawTextW
EnableWindow
GetWindowTextW
BeginPaint
CloseWindow
GetWindowTextA
DrawTextA
GetDC
GetClientRect
DefWindowProcW
gdi32
CreatePolygonRgn
FillRgn
CreateCompatibleDC
CreateFontIndirectA
DeleteObject
CreateSolidBrush
CreateRectRgn
CreateFontIndirectW
CombineRgn
GetDeviceCaps
BitBlt
GetStockObject
FrameRgn
CreateRoundRectRgn
CreateCompatibleBitmap
oleaut32
SafeArrayCopy
GetErrorInfo
SysAllocStringByteLen
SysAllocStringLen
SysAllocString
SafeArrayCreate
SetErrorInfo
CreateErrorInfo
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcmp
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ