Static task
static1
Behavioral task
behavioral1
Sample
c03128676371e57444b7d7538882bb282bd61e2dc36a83bcebe8ff504b9060f5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c03128676371e57444b7d7538882bb282bd61e2dc36a83bcebe8ff504b9060f5.exe
Resource
win10v2004-20220812-en
General
-
Target
c03128676371e57444b7d7538882bb282bd61e2dc36a83bcebe8ff504b9060f5
-
Size
108KB
-
MD5
941d1c2862b2881ff402e7422eb349f1
-
SHA1
c6f1bbc926bbe0e4bc994024166b3346436c6639
-
SHA256
c03128676371e57444b7d7538882bb282bd61e2dc36a83bcebe8ff504b9060f5
-
SHA512
80a175dbc0afbc04a77b41d96eee065dc9154b30311ad08e651eeb2a65c8dce567503d64c0cd7c1d4f39594b9caf0dfb2d9a5f28c89a2b5f58bd1b20b1ad62a4
-
SSDEEP
1536:Zn5tnwiQ+yZk4IrXuscRt+mBh7SnjVJ5zJTe36kfYg4o2hg/TnZ4GwPJUEbooPRJ:Z/4kfXjcqmBsp2w/oag7nZ4GwPJltZrd
Malware Config
Signatures
Files
-
c03128676371e57444b7d7538882bb282bd61e2dc36a83bcebe8ff504b9060f5.exe windows x86
e556d5af9f73c9fd170793276d56674b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
CloseHandle
GetFileSize
GetProcAddress
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
ReadFile
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapFree
VirtualFree
HeapCreate
FindResourceA
GetModuleHandleA
GetVersion
GetTickCount
HeapDestroy
GetFileType
GetStringTypeW
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
user32
CreateWindowExA
BeginPaint
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassExA
EndPaint
ShowWindow
UpdateWindow
LoadStringA
DialogBoxParamA
FindWindowA
DefWindowProcA
gdi32
TextOutA
Rectangle
advapi32
RegOpenKeyExA
ole32
CoTaskMemAlloc
CoInitialize
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BSS Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ