Static task
static1
Behavioral task
behavioral1
Sample
d63697008521acf14448f29676f4f58edff4e19c10049b76325761a36ad2af9f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d63697008521acf14448f29676f4f58edff4e19c10049b76325761a36ad2af9f.exe
Resource
win10v2004-20220812-en
General
-
Target
d63697008521acf14448f29676f4f58edff4e19c10049b76325761a36ad2af9f
-
Size
102KB
-
MD5
3a8dcdd3bd33f1da50fd08cc0ece83d8
-
SHA1
ded2831f220b7f7750099f8c3f7ee79939602f2e
-
SHA256
d63697008521acf14448f29676f4f58edff4e19c10049b76325761a36ad2af9f
-
SHA512
a2733a0883fe8a34d67f08c8ef247832857f78f130b178b06f06517cf50c8fcdaa02b6cc471d224f2e4115553490f32d2052f6538d0a72a25f476d479cac5bb5
-
SSDEEP
3072:Z65yLOF0193QvgkruZyyfGQDkoIyOMdELWcs:Z65uR1iv31mGA+Lx
Malware Config
Signatures
Files
-
d63697008521acf14448f29676f4f58edff4e19c10049b76325761a36ad2af9f.exe windows x86
29eab5d46fa3de6a79be25d3aa374e12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
GetOEMCP
GetConsoleOutputCP
GetModuleHandleA
lstrlenW
IsDebuggerPresent
GetProcessHeap
GetWindowsDirectoryA
DeleteFileW
RemoveDirectoryA
GetCurrentProcessId
GetUserDefaultLangID
GetCurrentThread
GlobalFindAtomW
lstrcmpiW
GetStartupInfoA
QueryPerformanceCounter
SetCurrentDirectoryA
GetModuleHandleW
GetACP
GlobalFindAtomA
GetCommandLineA
GetTickCount
MulDiv
CopyFileA
GetCurrentThreadId
lstrcmpiA
GetThreadLocale
GetCommandLineW
GetDriveTypeA
lstrlenA
GetCurrentProcess
GetVersion
RemoveDirectoryW
lstrcmpA
ExitProcess
VirtualAlloc
user32
TranslateMessage
GetParent
GetDC
GetDesktopWindow
CharNextA
GetSystemMetrics
gdi32
GetDeviceCaps
GetTextMetricsA
SelectObject
CreateSolidBrush
GetClipBox
GetObjectA
SetMapMode
RectVisible
RestoreDC
SetTextAlign
GetStockObject
CreateCompatibleDC
DeleteDC
CreateFontIndirectA
SetTextColor
LineTo
SetStretchBltMode
GetPixel
PatBlt
CreatePen
SelectPalette
SaveDC
DeleteObject
CreatePalette
GetNearestPaletteIndex
glu32
gluQuadricCallback
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ