Static task
static1
Behavioral task
behavioral1
Sample
6228c52507926a4714e307db5b766ba672ee531c273804e34bb623ff60360bd6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6228c52507926a4714e307db5b766ba672ee531c273804e34bb623ff60360bd6.exe
Resource
win10v2004-20221111-en
General
-
Target
6228c52507926a4714e307db5b766ba672ee531c273804e34bb623ff60360bd6
-
Size
1.0MB
-
MD5
ce6776a93bb94c3ecd20ed718333cb9f
-
SHA1
ad9f00af242f656094758a2e1a9e54cf4ebc88ad
-
SHA256
6228c52507926a4714e307db5b766ba672ee531c273804e34bb623ff60360bd6
-
SHA512
04e73a50e037e388b967e44c557982b8c2ce4e2948f7e7d3c405db151de307c080ed38e1b5f7e17fbb15a8b87373cf6a24b0f1cd4baf831984b9eb38630630f6
-
SSDEEP
12288:KgxbTBrYBnwnBXzAy1GI332vHlxyZ5LM+PVp3Zvy2JzL3g+g0lSBPvdH29eKSfuQ:K0TBrIkXz1Glly6jfui20sk9ay
Malware Config
Signatures
Files
-
6228c52507926a4714e307db5b766ba672ee531c273804e34bb623ff60360bd6.exe windows x86
eec8a95120f6fc561458cd0725dcfee7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetVersion
CloseHandle
CreateEventA
GetVersionExA
GetFileSize
GetStartupInfoA
GlobalFree
Sleep
FreeLibrary
GetLastError
LocalAlloc
GlobalAlloc
lstrcpyA
GetCommandLineA
lstrlenA
LocalFree
GetTickCount
GetModuleHandleA
lstrcatA
gdi32
GetTextMetricsA
GetStockObject
CreateSolidBrush
GetTextExtentPoint32A
CreateCompatibleDC
SelectObject
DeleteObject
CreateFontIndirectA
MoveToEx
PatBlt
LineTo
GetPixel
GetTextColor
GetBkColor
msvcrt
exit
__getmainargs
_except_handler3
_c_exit
wcschr
_XcptFilter
wcslen
memmove
__p__commode
wcstoul
rand
__set_app_type
__p__fmode
__CxxFrameHandler
_adjust_fdiv
_initterm
_controlfp
__setusermatherr
_acmdln
_exit
user32
GetMessageA
MessageBoxA
DispatchMessageA
CreateWindowExA
ShowWindow
EndPaint
DefWindowProcA
DialogBoxParamA
ScreenToClient
LoadIconA
GetSysColor
SetFocus
TranslateMessage
GetClientRect
GetFocus
DestroyWindow
EndDialog
GetWindowRect
BeginPaint
SetWindowTextA
PostQuitMessage
Sections
.text Size: 512B - Virtual size: 478B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.0MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ