Static task
static1
Behavioral task
behavioral1
Sample
f6a01be2db03806d705a14d7c226eea3902f45ec6501d918de977c4867cdff27.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6a01be2db03806d705a14d7c226eea3902f45ec6501d918de977c4867cdff27.exe
Resource
win10v2004-20220812-en
General
-
Target
f6a01be2db03806d705a14d7c226eea3902f45ec6501d918de977c4867cdff27
-
Size
165KB
-
MD5
89abb9cffde67a0c2d6be8aa96b64683
-
SHA1
b486a66f565dd9c4e46f769c6921f2b7a9662c92
-
SHA256
f6a01be2db03806d705a14d7c226eea3902f45ec6501d918de977c4867cdff27
-
SHA512
53badc5854cc539a7ed8132d666bfcfdebf12e4f8223ec4727bc906ff07c60d688324c612ea5300c01d4f34826a44dd34e3222bc7464090f053593c6f52854d6
-
SSDEEP
3072:Ud6aj6usHrh5LpbyNtUqCQZZWic+dIOVCGFI+Efst:UdTj6fxEDZw+dDefst
Malware Config
Signatures
Files
-
f6a01be2db03806d705a14d7c226eea3902f45ec6501d918de977c4867cdff27.exe windows x86
4d83958d760d6b73fa24865e7fa56630
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextExtentPointA
GetDeviceCaps
SelectObject
DeleteObject
GetTextMetricsA
CreateFontIndirectA
msimg32
AlphaBlend
TransparentBlt
kernel32
SetHandleCount
InterlockedExchange
TlsGetValue
GetCPInfoExA
GetTickCount
GetLastError
HeapSize
QueryPerformanceCounter
FreeEnvironmentStringsA
GetFileType
InitializeCriticalSection
MultiByteToWideChar
GetVersionExA
UnhandledExceptionFilter
TlsSetValue
DeleteCriticalSection
LeaveCriticalSection
GetACP
EnumResourceNamesW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
lstrlenW
RaiseException
FreeEnvironmentStringsW
GetCPInfo
GetStdHandle
GetStartupInfoA
RaiseException
GetThreadLocale
InterlockedIncrement
EnterCriticalSection
GetOEMCP
GetLocaleInfoA
GetCurrentProcessId
ole32
CoGetMalloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
StringFromGUID2
CoTaskMemRealloc
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ