Static task
static1
Behavioral task
behavioral1
Sample
fd75f6d17c8cccd9b79c98c11e12d37f0d6e23680b770a5c4abff18e71842961.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fd75f6d17c8cccd9b79c98c11e12d37f0d6e23680b770a5c4abff18e71842961.exe
Resource
win10v2004-20221111-en
General
-
Target
fd75f6d17c8cccd9b79c98c11e12d37f0d6e23680b770a5c4abff18e71842961
-
Size
227KB
-
MD5
00a5686401b88f0439ad2c223f2cb9ab
-
SHA1
f00f722f3733cf278fa892bff026236380248885
-
SHA256
fd75f6d17c8cccd9b79c98c11e12d37f0d6e23680b770a5c4abff18e71842961
-
SHA512
4419be6c78ab85ce0bf2f0e7827fc40f3a95887c437df665398834bf616ea988e73ba9d18cc7b2f6d809d073a66e01ef216bad1f2f48fa3769a85c89ae930c56
-
SSDEEP
6144:yeDJTqApWm7VISj8k6pkv7Sx5cOE26Owg6aOTbQnaYG343n:rDJWApWaZL6aOx5cOEUgoaYG343
Malware Config
Signatures
Files
-
fd75f6d17c8cccd9b79c98c11e12d37f0d6e23680b770a5c4abff18e71842961.exe windows x86
3ca4480483355edf5c47dd67fd298698
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdiplus
GdipCreateBitmapFromFile
GdipAlloc
GdipCloneImage
GdipFree
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipBitmapGetPixel
GdipDrawImageI
GdiplusStartup
GdiplusShutdown
GdipDeleteGraphics
GdipCreateFromHDC
kernel32
GetModuleHandleW
DeleteFileW
GetTempFileNameW
GetTempPathW
LockResource
SizeofResource
LoadResource
FindResourceW
GetModuleFileNameW
LoadLibraryA
GetProcessHeap
HeapAlloc
ReadFile
CloseHandle
HeapFree
CreateFileW
WriteFile
LoadLibraryW
GetProcAddress
GetCurrentProcess
FreeLibrary
user32
PostQuitMessage
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
LoadCursorW
DefWindowProcW
EndPaint
FillRect
GetClientRect
BeginPaint
InvalidateRect
SendMessageW
gdi32
SetPixel
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 620B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 217KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ