Static task
static1
Behavioral task
behavioral1
Sample
1bab467872ddd8cb2ce1d2cff356df7b82deeddc199dad3e0d12d1d0244a1147.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1bab467872ddd8cb2ce1d2cff356df7b82deeddc199dad3e0d12d1d0244a1147.exe
Resource
win10v2004-20220812-en
General
-
Target
1bab467872ddd8cb2ce1d2cff356df7b82deeddc199dad3e0d12d1d0244a1147
-
Size
127KB
-
MD5
a8253f7ebb70dfde26523ad59ae47478
-
SHA1
daf4817bcb38da5318550f3094af3b90697ca440
-
SHA256
1bab467872ddd8cb2ce1d2cff356df7b82deeddc199dad3e0d12d1d0244a1147
-
SHA512
1af4ab553f23705f34240bb23fc604074fb55ca96fb52e19a446a94214b05f3d5c70809feb4966df183b7ff6d17b79bf8ba25a1a97e4ae1df9d6b51c42c7e616
-
SSDEEP
3072:FIxGJGkiBWoO10d2ApT4DU04VOHN0Mn/LpFAXqNVT8R7C:msJGBw13t2OMX2TIC
Malware Config
Signatures
Files
-
1bab467872ddd8cb2ce1d2cff356df7b82deeddc199dad3e0d12d1d0244a1147.exe windows x86
e83e8308d97f9d2c043a19bfd679cd0f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
GetParent
TranslateMessage
GetSystemMetrics
GetDesktopWindow
CharNextA
kernel32
GlobalFindAtomA
GetWindowsDirectoryA
lstrlenA
CopyFileA
QueryPerformanceCounter
lstrlenW
lstrcmpA
RemoveDirectoryA
lstrcmpiW
GetModuleHandleA
VirtualAlloc
DeleteFileA
VirtualFree
GetCommandLineA
RemoveDirectoryW
FindClose
lstrcmpiA
GetSystemTime
gdi32
GetStockObject
SetStretchBltMode
SetMapMode
SaveDC
SelectObject
DeleteDC
GetTextMetricsA
GetClipBox
GetDeviceCaps
SetTextColor
CreateFontIndirectA
GetObjectA
LineTo
CreatePalette
SetTextAlign
RectVisible
RestoreDC
CreateSolidBrush
DeleteObject
GetPixel
SelectPalette
CreateCompatibleDC
glu32
gluNurbsCallback
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cnaixhm Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ozfsqav Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cbxqokf Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dylaglf Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE