Static task
static1
Behavioral task
behavioral1
Sample
b0ebb8006e9e6d878cb889271137b8513e0c3c42b4806f370f367dd70a91cc46.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b0ebb8006e9e6d878cb889271137b8513e0c3c42b4806f370f367dd70a91cc46.exe
Resource
win10v2004-20220812-en
General
-
Target
b0ebb8006e9e6d878cb889271137b8513e0c3c42b4806f370f367dd70a91cc46
-
Size
107KB
-
MD5
3fa234a2a130c25bd46c5aef5a0516b3
-
SHA1
b91df25d2688d6aed2b22d24a51ef758252b3ce4
-
SHA256
b0ebb8006e9e6d878cb889271137b8513e0c3c42b4806f370f367dd70a91cc46
-
SHA512
15cf8c00d89a0bbfc0b1964987ad200bab88a9143ee7b6277b5a6461414e8e7587766496071b9836b5beee776487118f5ddb031cdc1dc69601262c011485d0be
-
SSDEEP
1536:QsYcrlIl4qTfOjaGrSl0MyOLuopOasV/bp43aFWx3i6EBd4JvgoKL:PY4lIl4qLeah0M7LuCOa6GVJvgos
Malware Config
Signatures
Files
-
b0ebb8006e9e6d878cb889271137b8513e0c3c42b4806f370f367dd70a91cc46.exe windows x86
182034d8850843e664e942cb8837b670
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreatePalette
GetDeviceCaps
SelectObject
DeleteObject
GetClipBox
CreateSolidBrush
SetStretchBltMode
GetObjectA
SaveDC
CreateCompatibleDC
LineTo
GetTextMetricsA
RectVisible
CreateFontIndirectA
SelectPalette
GetStockObject
kernel32
lstrcmpA
RemoveDirectoryA
lstrcmpiW
GetSystemTime
lstrlenA
lstrcmpiA
QueryPerformanceCounter
lstrlenW
GlobalFindAtomA
GetCommandLineA
GetWindowsDirectoryA
DeleteFileA
RemoveDirectoryW
FindClose
GetModuleHandleA
CopyFileA
VirtualAlloc
VirtualFree
user32
TranslateMessage
GetDesktopWindow
GetSystemMetrics
GetParent
CharNextA
GetDC
glu32
gluNurbsCallback
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE