Static task
static1
Behavioral task
behavioral1
Sample
ac1caf072a395394048d60e2cd2928ef1737857f39bc9b90ac96fcddb02217d9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ac1caf072a395394048d60e2cd2928ef1737857f39bc9b90ac96fcddb02217d9.exe
Resource
win10v2004-20220812-en
General
-
Target
ac1caf072a395394048d60e2cd2928ef1737857f39bc9b90ac96fcddb02217d9
-
Size
111KB
-
MD5
02e9635072573845872f771c0472356f
-
SHA1
a8b054f40c8a755ab86866dc4e941c511d658188
-
SHA256
ac1caf072a395394048d60e2cd2928ef1737857f39bc9b90ac96fcddb02217d9
-
SHA512
de54a4e796d57a9c607f5384a66e8272debf93a169cd163b5bd006db34c7d75835b168bfb53ce8fc0ee65891c0d2d06897dfbd7089390e22c4e73f2eaa3ad271
-
SSDEEP
1536:DPmsyn3IWYPkARjZLy0ytPdwV1eeKJ/9PEuH2qdbywrPSBeTkTk:KsW3SjZ2RdwV1eTJ/Rkqdbvrv
Malware Config
Signatures
Files
-
ac1caf072a395394048d60e2cd2928ef1737857f39bc9b90ac96fcddb02217d9.exe windows x86
dcb9f933af61a9d2668542def9555b5f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
GetPixel
CreatePalette
SelectPalette
SelectObject
CreatePen
SetMapMode
SaveDC
SetTextAlign
GetTextMetricsA
CreateSolidBrush
SetStretchBltMode
GetObjectA
CreateCompatibleDC
LineTo
RestoreDC
GetClipBox
PatBlt
GetDeviceCaps
CreateFontIndirectA
SetTextColor
GetStockObject
RectVisible
SetPixel
DeleteDC
user32
GetSystemMetrics
TranslateMessage
CharNextA
GetParent
GetDesktopWindow
kernel32
GetUserDefaultLangID
DeleteFileW
GetTickCount
QueryPerformanceCounter
lstrcmpA
VirtualAlloc
GetCurrentProcess
GetConsoleOutputCP
GlobalFindAtomW
VirtualFree
GetCommandLineA
lstrlenA
GetCurrentThreadId
GetModuleHandleA
SetCurrentDirectoryA
GetCurrentThread
GetDriveTypeA
GetACP
GetModuleHandleW
MulDiv
GetThreadLocale
GetOEMCP
CopyFileA
GetProcessHeap
GetCurrentProcessId
lstrcmpiW
DeleteFileA
GetCommandLineW
GetWindowsDirectoryA
GlobalFindAtomA
GetStartupInfoA
RemoveDirectoryA
GetVersion
IsDebuggerPresent
lstrcmpiA
RemoveDirectoryW
lstrlenW
glu32
gluQuadricCallback
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ