Static task
static1
Behavioral task
behavioral1
Sample
ed386797faf0865277b2119b5f0707256440a08c72cf8831f3c6d3ff8282cfbe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed386797faf0865277b2119b5f0707256440a08c72cf8831f3c6d3ff8282cfbe.exe
Resource
win10v2004-20220812-en
General
-
Target
ed386797faf0865277b2119b5f0707256440a08c72cf8831f3c6d3ff8282cfbe
-
Size
216KB
-
MD5
47e63185af67dfc15b39febf95c9b0ce
-
SHA1
7c33f85decf7143b69fcace5fa4034761f83326c
-
SHA256
ed386797faf0865277b2119b5f0707256440a08c72cf8831f3c6d3ff8282cfbe
-
SHA512
b316f41d38476f3eef622674040ddc697e66a577fd634c0b1c154d7d49f7d0ca83ce163364a1f0c6b94279ff07c8a0a143ef5be032c7f202d70b60a3b84e06a2
-
SSDEEP
6144:wZXuw475WvP3PyCgbS75qUXX7zfVvMZVO2O:w0wOYvP/EbsqOX3VvF
Malware Config
Signatures
Files
-
ed386797faf0865277b2119b5f0707256440a08c72cf8831f3c6d3ff8282cfbe.exe windows x86
1f9bf57945ae61699ebaffa09c2707bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
ArcTo
BeginPath
CreateFontA
CreateHatchBrush
EnumFontFamiliesW
FillRgn
GetROP2
MoveToEx
SetBrushOrgEx
SetColorAdjustment
SetMapperFlags
kernel32
CloseHandle
CreateFileW
CreateProcessA
CreateProcessW
ExitProcess
GetFileSize
GetLastError
GetLocalTime
GetModuleFileNameW
GetPrivateProfileStringA
GetStdHandle
GetStringTypeW
GetTempPathW
GetThreadLocale
GetUserDefaultLCID
IsBadWritePtr
LocalAlloc
MoveFileA
OutputDebugStringA
ResumeThread
TlsAlloc
VirtualProtect
WaitForSingleObject
lstrcpyA
user32
CharLowerA
CreateWindowExA
DrawFrameControl
EndDialog
FillRect
GetClientRect
GetDC
GetKeyState
GetMenuState
GetSubMenu
GetSystemMetrics
GetWindowLongA
InflateRect
IsDialogMessageA
IsWindowEnabled
IsZoomed
OffsetRect
RegisterClipboardFormatA
ReleaseCapture
RemovePropA
SendDlgItemMessageA
SetWindowPlacement
TrackPopupMenu
UpdateWindow
wsprintfA
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ