Static task
static1
Behavioral task
behavioral1
Sample
b1d16e1de1969b36d18f40855272f754caddabde8c5ef693208c071377a6b7d9.exe
Resource
win7-20220812-en
General
-
Target
b1d16e1de1969b36d18f40855272f754caddabde8c5ef693208c071377a6b7d9
-
Size
77KB
-
MD5
507d6ff564943c5203392fd6961e38fa
-
SHA1
185970e25ff5d11a244a835686689401e3184db4
-
SHA256
b1d16e1de1969b36d18f40855272f754caddabde8c5ef693208c071377a6b7d9
-
SHA512
a16aa439499e1334bb449e74e4e2d652da99e96cc45644c90a08b1a5abc4fe81a5b645f50d66342d87a963497c204d46c743a1248c6c32c6470bad86db017b71
-
SSDEEP
1536:mf4uas6OXByfNSfIsiya+a19LLKdnABrAS6f/igyATpSh:2ssfByfNmIDya14jrHig18h
Malware Config
Signatures
Files
-
b1d16e1de1969b36d18f40855272f754caddabde8c5ef693208c071377a6b7d9.exe windows x86
3a0657dd310c0183215c56db28720943
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
fseek
ftell
fread
sprintf
fabs
ceil
malloc
floor
free
fclose
strlen
strcpy
strncpy
strcat
_stricmp
_CIpow
_CIatan2
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
GetProcAddress
FreeLibrary
LoadLibraryA
InitializeCriticalSection
TlsAlloc
GetVersionExA
GetCurrentProcessId
GetCurrentThreadId
CloseHandle
CreateFileA
SetFilePointer
SetEndOfFile
WriteFile
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
user32
GetPropA
RemovePropA
FillRect
GetIconInfo
DrawStateA
GetParent
GetClientRect
SendMessageA
InvalidateRect
CallWindowProcA
SetPropA
SetWindowLongA
DestroyWindow
ShowWindow
IsZoomed
GetWindowLongA
MoveWindow
ShowCursor
BeginPaint
EndPaint
DefWindowProcA
LoadIconA
RegisterClassExA
CreateWindowExA
ClipCursor
GetWindowRect
SetCursorPos
GetWindow
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadCursorA
DestroyIcon
GetForegroundWindow
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos
gdi32
GetObjectType
GetObjectA
DeleteObject
IntersectClipRect
GetStockObject
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
comdlg32
GetSaveFileNameA
GetOpenFileNameA
comctl32
CreateStatusWindowA
InitCommonControlsEx
winmm
timeEndPeriod
ole32
RevokeDragDrop
CoInitialize
Sections
.code Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 863B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE