Static task
static1
Behavioral task
behavioral1
Sample
e42080bcb4a83d277b523d3723cec3e95309130d0717d70f4f9bd5b7412ba35c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e42080bcb4a83d277b523d3723cec3e95309130d0717d70f4f9bd5b7412ba35c.exe
Resource
win10v2004-20220812-en
General
-
Target
e42080bcb4a83d277b523d3723cec3e95309130d0717d70f4f9bd5b7412ba35c
-
Size
97KB
-
MD5
39611c292de46a4bbf01f88251a065e0
-
SHA1
404d84a4a65be9268ca84aa12e2f019e3b6b960d
-
SHA256
e42080bcb4a83d277b523d3723cec3e95309130d0717d70f4f9bd5b7412ba35c
-
SHA512
77b859c3589c545b55b02d2ce742164a600ce5a4ab0c2ba738bbb3f937cca731238c66ff4e23a84c437ef9bf716858eda529d3ba5a7bb435d1fdc259741897a5
-
SSDEEP
1536:pNSeuR3MtlXWDYjrFWibg+/k2GxTF1tXMHPQ23Lv+zM490Q3/AQP5MiBqT7:bgpWoDYjrpj/yxLF2PDvC9f/A2MH
Malware Config
Signatures
Files
-
e42080bcb4a83d277b523d3723cec3e95309130d0717d70f4f9bd5b7412ba35c.exe windows x86
a4727f83175164d379531c329e47ba5c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
GetDesktopWindow
CharNextA
GetDC
GetParent
GetSystemMetrics
kernel32
GetCurrentProcess
GetVersion
DeleteFileA
GetCommandLineW
QueryPerformanceCounter
GetThreadLocale
RemoveDirectoryA
lstrcmpA
GetCurrentThread
GetConsoleOutputCP
GetModuleHandleA
CopyFileA
GetTickCount
GetUserDefaultLangID
GetWindowsDirectoryA
SetCurrentDirectoryA
GetStartupInfoA
IsDebuggerPresent
GlobalFindAtomW
lstrcmpiW
GetACP
GetDriveTypeA
GetOEMCP
DeleteFileW
lstrlenA
lstrcmpiA
GlobalFindAtomA
GetProcessHeap
GetModuleHandleW
RemoveDirectoryW
GetCurrentThreadId
ExitProcess
lstrlenW
GetCommandLineA
MulDiv
VirtualAlloc
gdi32
CreateSolidBrush
GetObjectA
GetPixel
GetClipBox
CreateCompatibleDC
SelectObject
PatBlt
SetStretchBltMode
GetTextMetricsA
SaveDC
SetMapMode
SetTextColor
SetTextAlign
GetStockObject
SelectPalette
CreatePen
DeleteObject
DeleteDC
GetDeviceCaps
RestoreDC
CreateFontIndirectA
LineTo
RectVisible
CreatePalette
GetNearestPaletteIndex
glu32
gluQuadricCallback
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE