Static task
static1
Behavioral task
behavioral1
Sample
ea50c226145592a673380ffeb6ebd7c42dc641b5bc3149a2234769fc3ecbf6e3.exe
Resource
win7-20221111-en
General
-
Target
ea50c226145592a673380ffeb6ebd7c42dc641b5bc3149a2234769fc3ecbf6e3
-
Size
186KB
-
MD5
416c7489301a646bcec65afc39f8c670
-
SHA1
9f30f9f3eaaab0fbc624e621e74bfeb6672549ee
-
SHA256
ea50c226145592a673380ffeb6ebd7c42dc641b5bc3149a2234769fc3ecbf6e3
-
SHA512
0201c81906f847b0cfcc872f5e12b122e31a194521b318ffcda83576a6b1072bbaabd491adca03054a05d3ea51b160b938fbae062a38beb6cc8068fba5a6b52a
-
SSDEEP
3072:u9LCd0aaMj0XUGyp8N0emsk2lBeg+1/lSpW7UBbJ8+G0nEQHSeEA+RrhcIQ4eZ:WLCddLYEXIlmskiBegiSmUNJe0yQ+Rrq
Malware Config
Signatures
Files
-
ea50c226145592a673380ffeb6ebd7c42dc641b5bc3149a2234769fc3ecbf6e3.exe windows x86
c8f68239c481ed2dff40b1641ac849ff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateDCW
CreatePen
CreateDIBSection
CreateCompatibleDC
LineTo
SelectObject
GetObjectType
SetStretchBltMode
StretchBlt
DeleteDC
BitBlt
CreateBitmap
rpcrt4
I_RpcFreeBuffer
UuidCreate
msimg32
AlphaBlend
TransparentBlt
user32
FindWindowA
RedrawWindow
TrackPopupMenuEx
CreatePopupMenu
ClipCursor
DestroyMenu
GetDesktopWindow
ole32
CoUninitialize
CoInitialize
StringFromGUID2
CoFreeUnusedLibraries
CoCreateInstance
kernel32
FlushInstructionCache
ExitProcess
LoadLibraryW
LocalAlloc
ExitProcess
SetLocaleInfoW
GetVersionExA
LocalFree
GetModuleFileNameA
gdiplus
GdipGetImageHeight
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipDisposeImage
comctl32
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
winmm
timeGetTime
Sections
.text Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ