Static task
static1
Behavioral task
behavioral1
Sample
e52b6d92ae38bbfcf47d2641b7623e1a9f51d7059ffa448b19775fac59118ee6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e52b6d92ae38bbfcf47d2641b7623e1a9f51d7059ffa448b19775fac59118ee6.exe
Resource
win10v2004-20221111-en
General
-
Target
e52b6d92ae38bbfcf47d2641b7623e1a9f51d7059ffa448b19775fac59118ee6
-
Size
114KB
-
MD5
0cf6b93ab54893e144c6907965062ea0
-
SHA1
1aa5aa37d8902b38988fbccf7519bca8c372b7ef
-
SHA256
e52b6d92ae38bbfcf47d2641b7623e1a9f51d7059ffa448b19775fac59118ee6
-
SHA512
0e9a9fbf4fe71759e1383c13550e861040872fd114948d4a19d56f4d4725b78458567468f1cd59faa28f247d25c17ba6e311e577a0e5f3286217fe8cc546db1d
-
SSDEEP
1536:gpk2MPKgxEWfAJ46OO3AEwX49O+qyjhQxVm6m3w+ctyz2vPfOqPiqLeuEQ:rjPKcAJeO3BwX40+qyiPVS2/OmLeu
Malware Config
Signatures
Files
-
e52b6d92ae38bbfcf47d2641b7623e1a9f51d7059ffa448b19775fac59118ee6.exe windows x86
06e6af83791d8dee9daedcaa99645bc2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetStockObject
CreateCompatibleDC
GetPixel
GetClipBox
GetObjectA
CreateFontIndirectA
DeleteDC
LineTo
RectVisible
SetStretchBltMode
SaveDC
SelectObject
SelectPalette
SetTextColor
GetTextMetricsA
CreatePalette
PatBlt
GetDeviceCaps
RestoreDC
SetTextAlign
DeleteObject
CreateSolidBrush
CreatePen
SetMapMode
SetPixel
kernel32
GetModuleHandleW
MulDiv
GetTickCount
GetOEMCP
lstrcmpiW
GetDriveTypeA
lstrcmpiA
GetACP
GetConsoleOutputCP
IsDebuggerPresent
GlobalFindAtomW
GetProcessHeap
GetCurrentThread
RemoveDirectoryA
GetStartupInfoA
GetCommandLineA
SetCurrentDirectoryA
lstrlenA
CopyFileA
GetModuleHandleA
DeleteFileA
lstrcmpA
GetThreadLocale
GlobalFindAtomA
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentThreadId
GetWindowsDirectoryA
GetCommandLineW
DeleteFileW
GetVersion
RemoveDirectoryW
lstrlenW
GetCurrentProcess
GetUserDefaultLangID
VirtualAlloc
VirtualFree
user32
GetSystemMetrics
GetParent
GetDesktopWindow
TranslateMessage
CharNextA
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE