Static task
static1
Behavioral task
behavioral1
Sample
df0b35bb4412d86a5c6af3d93b3ff5b62d451189f86372b9a96cea429fd79be2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
df0b35bb4412d86a5c6af3d93b3ff5b62d451189f86372b9a96cea429fd79be2.exe
Resource
win10v2004-20220901-en
General
-
Target
df0b35bb4412d86a5c6af3d93b3ff5b62d451189f86372b9a96cea429fd79be2
-
Size
53KB
-
MD5
b6829c731d2ac1739c2ad4abb8ea0ce5
-
SHA1
1516e83b65393083521e5c01947105f7aa18055c
-
SHA256
df0b35bb4412d86a5c6af3d93b3ff5b62d451189f86372b9a96cea429fd79be2
-
SHA512
0c56192f23a86d6b3e43d4ccf9ecbfb86bfb18cee799a527f1e8c49a1f231f9474bb256a8cdad18de8ed613d16215e2007db766f5cbc08e7cc9a6e40e7a60cbc
-
SSDEEP
768:SDGWQe2CZ5CCI1ewT3NLdSXqKQ9hSzkbsMevLVGlYuhg4TLjh2/I2WZObPy:SDXLZ5BkNm/WiJGlY7QV2/IBwr
Malware Config
Signatures
Files
-
df0b35bb4412d86a5c6af3d93b3ff5b62d451189f86372b9a96cea429fd79be2.exe windows x86
25a74b8c2ec4b1f733c89ec0273fa0f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetLastError
GetModuleHandleA
CreateEventA
Sleep
LocalFree
GetStartupInfoA
GlobalFree
GetVersionExA
FreeLibrary
GetTickCount
GetStdHandle
GlobalAlloc
GetCommandLineA
lstrcpyA
user32
PostQuitMessage
LoadIconA
DestroyWindow
ScreenToClient
ShowWindow
CreateWindowExA
EndDialog
TranslateMessage
gdi32
ExtTextOutA
DeleteObject
GetTextColor
GetStockObject
CreateFontIndirectA
PatBlt
GetBkColor
SetROP2
GetTextMetricsA
GetTextExtentPoint32A
BitBlt
CreateCompatibleDC
MoveToEx
msvcrt
wcschr
__set_app_type
_except_handler3
__CxxFrameHandler
wcstoul
__setusermatherr
_XcptFilter
rand
__p__commode
toupper
_initterm
_adjust_fdiv
wcslen
exit
memmove
_controlfp
_c_exit
__getmainargs
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ