Static task
static1
Behavioral task
behavioral1
Sample
803a098c17024ea0a4d90997f61adceda4325128d7e9b0e6d96d47d4c6754048.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
803a098c17024ea0a4d90997f61adceda4325128d7e9b0e6d96d47d4c6754048.exe
Resource
win10v2004-20221111-en
General
-
Target
803a098c17024ea0a4d90997f61adceda4325128d7e9b0e6d96d47d4c6754048
-
Size
193KB
-
MD5
ea30d402075c95a3a7bec58ac8fb7889
-
SHA1
ae1fbf886434f3181acb8009f9796abca1e37e0c
-
SHA256
803a098c17024ea0a4d90997f61adceda4325128d7e9b0e6d96d47d4c6754048
-
SHA512
1f307d89fa380221c8104829163d970ecf845af57fe15e35cbdad5204bad51a1fa70fb477afb21852d565e28f08ffeaa4979dfae2f002977ad3d847d771bd879
-
SSDEEP
6144:9eabgHALrbyXVs84fGVmDxjPskJ0UBJSt:sabCALr2XVsEmJPBWGgt
Malware Config
Signatures
Files
-
803a098c17024ea0a4d90997f61adceda4325128d7e9b0e6d96d47d4c6754048.exe windows x86
07b7bccfa643eba18e7a38752d870275
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetOpenFileNameA
ChooseColorA
GetFileTitleA
FindTextA
GetSaveFileNameA
version
VerFindFileA
VerInstallFileA
msvcrt
exit
sin
time
wcschr
memset
kernel32
GetProcAddress
VirtualAllocEx
GlobalAlloc
GetVersionExA
lstrlenA
GetCommandLineA
GetLastError
GetModuleHandleA
ExitProcess
IsBadReadPtr
GetCommandLineW
LoadLibraryA
LoadLibraryExA
ExitThread
ole32
CoUnmarshalInterface
CoUninitialize
CoDisconnectObject
CoGetMalloc
CoFreeUnusedLibraries
CoGetObjectContext
CoRegisterClassObject
CreateBindCtx
StringFromIID
CoRevokeClassObject
oleaut32
SysStringLen
OleLoadPicture
SafeArrayUnaccessData
SafeArrayCreate
SysFreeString
SysReAllocStringLen
Sections
.text Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.res9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.res3 Size: 512B - Virtual size: 398B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.res0 Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.res8 Size: 512B - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.res4 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ