Static task
static1
Behavioral task
behavioral1
Sample
f0c27f72ed841366336381427681202a8aaac343ddb824afe242d1d231289e57.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f0c27f72ed841366336381427681202a8aaac343ddb824afe242d1d231289e57.exe
Resource
win10v2004-20220812-en
General
-
Target
f0c27f72ed841366336381427681202a8aaac343ddb824afe242d1d231289e57
-
Size
39KB
-
MD5
3a29ee45fa5d2d79068b770c8b7edf19
-
SHA1
3131823fce3fd8c7a1cdab2ef7a86969a24cd58e
-
SHA256
f0c27f72ed841366336381427681202a8aaac343ddb824afe242d1d231289e57
-
SHA512
c604e2e66ee67fa7ff331e458e22e532db82bfa770dca02baca361a288baa3a08e46a7ebba54ab4437323c9464920bca7f34382d65b6eee39b60f888c9d36dcf
-
SSDEEP
768:AobOcRmZ2K4xN868R8Z8s888m8E8Qvc7I9nAl5kQw9jrcFeRl8jcd4WlJNGpdyp+:E4/zq+5hRpfvc7I9nMkQwd21avQqEMaZ
Malware Config
Signatures
Files
-
f0c27f72ed841366336381427681202a8aaac343ddb824afe242d1d231289e57.exe windows x86
4ee1cbf3a084ca9132dad450e39bf676
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
memmove
_CIlog
floor
ceil
_CIexp
fclose
fabs
malloc
free
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
ReadFile
GetLastError
FreeLibrary
LoadLibraryA
GetProcAddress
HeapReAlloc
HeapAlloc
TlsAlloc
GetVersionExA
user32
GetForegroundWindow
DestroyIcon
FillRect
gdi32
DeleteDC
GetObjectType
DeleteObject
GetObjectA
CreateCompatibleDC
GetDIBits
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
GetStockObject
comdlg32
PrintDlgA
wsock32
closesocket
WSACleanup
WSAStartup
Sections
.code Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ