Static task
static1
Behavioral task
behavioral1
Sample
c15b6174308f56d01aedcf173e855069c145b0b143cbcdff89a1ffa5ac9043e7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c15b6174308f56d01aedcf173e855069c145b0b143cbcdff89a1ffa5ac9043e7.exe
Resource
win10v2004-20220812-en
General
-
Target
c15b6174308f56d01aedcf173e855069c145b0b143cbcdff89a1ffa5ac9043e7
-
Size
113KB
-
MD5
f350586fda44f9015a16f2268187482a
-
SHA1
143d02c9a8d01e55823ff557a9ea692517686867
-
SHA256
c15b6174308f56d01aedcf173e855069c145b0b143cbcdff89a1ffa5ac9043e7
-
SHA512
2046710390e75c1d6ca078c8157d66b83b694a1ebf9a7d0dba6d5004f51874259f79f1dbbc2960f8c55f2de2b8f98a8cedb7b6adaab22f42e07f92fca48ceacd
-
SSDEEP
1536:Lyc2xHELNFb7P5VJ3+0B1CnBZ21aamTfhPFMFoXxx5FxDsgaFMgI9sWzZA9o1uV4:Lyc2xkLDJ3pBABZ6+Xb5fDsZAeau
Malware Config
Signatures
Files
-
c15b6174308f56d01aedcf173e855069c145b0b143cbcdff89a1ffa5ac9043e7.exe windows x86
782561c701b58c66a5e3f174f2e7a933
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
GetDriveTypeA
GetProcessHeap
GlobalFindAtomW
GetOEMCP
GetUserDefaultLangID
SetCurrentDirectoryA
lstrlenW
GetModuleHandleA
GetCurrentProcess
GetStartupInfoA
MulDiv
lstrlenA
GetConsoleOutputCP
GetCurrentProcessId
lstrcmpA
RemoveDirectoryW
lstrcmpiA
GetCommandLineA
DeleteFileA
GetModuleHandleW
GetCurrentThread
GetACP
IsDebuggerPresent
GetCurrentThreadId
GetVersion
CopyFileA
DeleteFileW
lstrcmpiW
GetTickCount
QueryPerformanceCounter
GetWindowsDirectoryA
GlobalFindAtomA
RemoveDirectoryA
VirtualAlloc
VirtualFree
user32
CharNextA
GetDesktopWindow
GetSystemMetrics
GetParent
TranslateMessage
gdi32
SelectObject
RestoreDC
DeleteDC
CreatePen
GetTextMetricsA
CreatePalette
SetTextAlign
LineTo
GetDeviceCaps
GetPixel
CreateSolidBrush
SetPixel
SetTextColor
RectVisible
CreateCompatibleDC
SelectPalette
CreateFontIndirectA
PatBlt
SetStretchBltMode
GetClipBox
DeleteObject
SaveDC
SetMapMode
GetObjectA
GetStockObject
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ