Static task
static1
Behavioral task
behavioral1
Sample
b278f409b1bdb3f3d15b7ba80c010a7069acca27ffea569084e513af44fef00e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b278f409b1bdb3f3d15b7ba80c010a7069acca27ffea569084e513af44fef00e.exe
Resource
win10v2004-20221111-en
General
-
Target
b278f409b1bdb3f3d15b7ba80c010a7069acca27ffea569084e513af44fef00e
-
Size
245KB
-
MD5
0f0211d50f3b783f12f8dc3e86eb6203
-
SHA1
3c302f46d448396cc5c2f28d739573b4bed0edcf
-
SHA256
b278f409b1bdb3f3d15b7ba80c010a7069acca27ffea569084e513af44fef00e
-
SHA512
e4e8a99849a8984ead5c138162b50c59e4db13de5f78c3acb25ba2590685c8485a7e03ddb1c4437c2932392541d897eb9101b95bec42dac34854616ee45b2399
-
SSDEEP
3072:gXHGG2OnqhUCvWay0LkVuDqShJ2iOo4k17s2HE2EkzxE8rOvkZs+NnynZ4ITFAbd:gXmOnxCvWay0Q5S/wkmExTZFy+IaniC7
Malware Config
Signatures
Files
-
b278f409b1bdb3f3d15b7ba80c010a7069acca27ffea569084e513af44fef00e.exe windows x86
3c5ec20139511fc232effb1e2a097902
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
fabs
ceil
malloc
floor
free
fclose
memcpy
fopen
fseek
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
HeapAlloc
HeapFree
TlsAlloc
Sleep
HeapReAlloc
user32
CallWindowProcA
DestroyIcon
FillRect
gdi32
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
GetObjectType
CreateDIBSection
DeleteObject
SelectObject
BitBlt
CreateBitmap
SetPixel
GetStockObject
shell32
Shell_NotifyIconA
Sections
.code Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 188B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ