Static task
static1
Behavioral task
behavioral1
Sample
96030c31df1b4917c480d1385c275e4e2934768c7607a3a3eb5321c0cc5e8b61.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
96030c31df1b4917c480d1385c275e4e2934768c7607a3a3eb5321c0cc5e8b61.exe
Resource
win10v2004-20221111-en
General
-
Target
96030c31df1b4917c480d1385c275e4e2934768c7607a3a3eb5321c0cc5e8b61
-
Size
446KB
-
MD5
4626e8f77a70145bcb81bdc189ea95f8
-
SHA1
1616e9cdaf290ad1bd5293e4af8d48ec508cfab8
-
SHA256
96030c31df1b4917c480d1385c275e4e2934768c7607a3a3eb5321c0cc5e8b61
-
SHA512
c26d6b1e39065f9523bef4f376fb74cf9dd2b14a4ac83df057dc65c3c67a28d3ff93231cde3e67305031a217dc28bec192297c886c4d127e88956feadd42babc
-
SSDEEP
6144:IO2lzlVlRV8uTRC+sXhTgbAUxQygAFvWNlBSoojQKjW/T9IbWduJRTQ7Rzb88day:b6rT8Xh+AGQQkbB/JUW/eVERzwHy
Malware Config
Signatures
Files
-
96030c31df1b4917c480d1385c275e4e2934768c7607a3a3eb5321c0cc5e8b61.exe windows x86
5b8fb26a6f83f1f5ba3768575f3f8419
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetBkMode
GetBkColor
GetTextColor
GetBoundsRect
GetROP2
GetClipRgn
GdiEntry4
GetBitmapBits
SetBkColor
GetCharWidth32W
GdiConvertMetaFilePict
wldap32
ord135
ord13
ord170
ord145
ord165
ord32
ord224
ord55
ord45
ord38
ord166
ord18
ord210
ord127
ord40
ord194
ord152
ord147
ord46
ord141
kernel32
Process32First
GetCurrentProcess
GetSystemDirectoryA
VirtualAlloc
OpenProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetLongPathNameW
ExitProcess
LoadResource
GetConsoleCP
GetSystemTimeAdjustment
GetCurrentThread
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 316KB - Virtual size: 494KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ