Static task
static1
Behavioral task
behavioral1
Sample
c5ff32c8fd225216278525a37fc9705979c6b24b692b07ad586525495eff06dc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c5ff32c8fd225216278525a37fc9705979c6b24b692b07ad586525495eff06dc.exe
Resource
win10v2004-20220812-en
General
-
Target
c5ff32c8fd225216278525a37fc9705979c6b24b692b07ad586525495eff06dc
-
Size
97KB
-
MD5
613ed4840f90e065ed42e90bd878e182
-
SHA1
a84e99fd0780537eb1e2d0adc4b8dbdfad2960d6
-
SHA256
c5ff32c8fd225216278525a37fc9705979c6b24b692b07ad586525495eff06dc
-
SHA512
efc5a8b9c48bf82dc238326b50a9ba25ece1a5b3b1cc635428e225a00b5198da19254fb0f826b8744fb9ce1c088c5266153b5fabc7453b854defad292e58d178
-
SSDEEP
1536:HUGk5TtzZyvRqobKOqSNvn3FdWXfbSlLIu4uYjSf3EPtFRs:0Gk5TZgvRkOqSN/3WPGlMugSvElrs
Malware Config
Signatures
Files
-
c5ff32c8fd225216278525a37fc9705979c6b24b692b07ad586525495eff06dc.exe windows x86
9d103abbad406860d7712955020941f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
gdi32
GetPixel
CopyEnhMetaFileA
CreateDIBSection
CreateBrushIndirect
GetCurrentPositionEx
CreateCompatibleBitmap
GetDIBits
SaveDC
SetTextColor
CreateCompatibleDC
msvcrt
malloc
sprintf
clock
user32
GetCapture
FrameRect
kernel32
LoadLibraryExA
LocalAlloc
GetCommandLineW
GetModuleHandleA
IsBadHugeReadPtr
GetLastError
GetProcAddress
LoadLibraryA
VirtualAllocEx
GetCommandLineA
GlobalAlloc
ExitProcess
VirtualAlloc
Sections
CODE Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 249KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES25 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES85 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES42 Size: 1024B - Virtual size: 825B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES08 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES72 Size: 1024B - Virtual size: 847B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES43 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES22 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES00 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ