Static task
static1
Behavioral task
behavioral1
Sample
79ba51b1701d62c07d41d39491f5bcebc21392c9c52781dbda204443ceaf469c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
79ba51b1701d62c07d41d39491f5bcebc21392c9c52781dbda204443ceaf469c.exe
Resource
win10v2004-20221111-en
General
-
Target
79ba51b1701d62c07d41d39491f5bcebc21392c9c52781dbda204443ceaf469c
-
Size
210KB
-
MD5
778a33f3b7bbb0190688eda7fcba1f16
-
SHA1
4d7fc392c7b4544baa9cd0790b59149518737f16
-
SHA256
79ba51b1701d62c07d41d39491f5bcebc21392c9c52781dbda204443ceaf469c
-
SHA512
0890cc678916d273d70d2581fdb17873dde2a80e79c5f4662ba57ec44d7160e77c6039f46d579bf603330b1250cd6fd5cbade3a11e7002329b6ea4b50fa9b593
-
SSDEEP
3072:6MNgmrBtoXO4YVL9N/rrC3Q3hjBBf8TuDHxr7WM5/6ggOB4dK+EjmfkhqYQsfvC:6kGaN3C3Ihf8Tu13W0/tmdK+gqaHC
Malware Config
Signatures
Files
-
79ba51b1701d62c07d41d39491f5bcebc21392c9c52781dbda204443ceaf469c.exe windows x86
1ad9e41efe22dd2c8dac89cc9d56c686
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
WriteConsoleA
WriteConsoleW
GetEnvironmentStrings
WideCharToMultiByte
CreateEventA
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetStartupInfoA
WriteFile
GetStringTypeW
WaitForMultipleObjects
lstrcmpA
GetComputerNameW
LoadLibraryA
HeapCreate
GetDateFormatA
GlobalMemoryStatus
ResumeThread
GetFileAttributesA
GlobalAddAtomW
GetSystemDirectoryA
user32
PeekMessageA
UpdateWindow
CopyRect
WindowFromPoint
GetSystemMetrics
GetWindowRect
ModifyMenuA
CreateMenu
TranslateMessage
LoadCursorA
GetDlgItemTextA
InvalidateRgn
MoveWindow
RegisterClassA
SetWindowTextA
KillTimer
ReleaseDC
DestroyIcon
gdi32
CreateDIBSection
GetObjectA
SetBkMode
StartPage
CreateSolidBrush
LineTo
GetDeviceCaps
Polyline
StartDocA
MoveToEx
SetBkColor
msvcrt
__p__commode
_adj_fpatan
_ismbblead
_XcptFilter
memcpy
_fpreset
_initterm
_acmdln
clock
_mbctolower
clearerr
_controlfp
wscanf
__p__fmode
_finite
_adjust_fdiv
_except_handler3
_exit
exit
__getmainargs
__setusermatherr
setlocale
__set_app_type
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 189KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ