Static task
static1
Behavioral task
behavioral1
Sample
f05fcfd1177b627370d8c6823c18d77f7eaad3ef5535fb3097318ec2ee00d1ea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f05fcfd1177b627370d8c6823c18d77f7eaad3ef5535fb3097318ec2ee00d1ea.exe
Resource
win10v2004-20220812-en
General
-
Target
f05fcfd1177b627370d8c6823c18d77f7eaad3ef5535fb3097318ec2ee00d1ea
-
Size
100KB
-
MD5
2371960b6085d7c6c15231ba55ff9d90
-
SHA1
aee09022ce76ac502e16f05ab19cacf330d1d346
-
SHA256
f05fcfd1177b627370d8c6823c18d77f7eaad3ef5535fb3097318ec2ee00d1ea
-
SHA512
173c75f2445960c7e8dccc25d809e4cadc4138537c26a995e9f0dc31972976981215f6a4e7aeefb2f7ea9ab6e8e1887bfa79ca68d64cce413aff9aea83b6b32f
-
SSDEEP
3072:6Uai8gjQT95RQOH1QlRW4AIbpoEH0roN1J:6ocDRZ+R/bFoU0rAr
Malware Config
Signatures
Files
-
f05fcfd1177b627370d8c6823c18d77f7eaad3ef5535fb3097318ec2ee00d1ea.exe windows x86
a69cab501db306b0eef185031569a785
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__getmainargs
sprintf
__setusermatherr
_exit
atoi
__p__environ
memcpy
_controlfp
sqrt
calloc
atexit
_XcptFilter
__p__commode
__p__fmode
_adjust_fdiv
_iob
__p___initenv
realloc
__set_app_type
fputs
free
_setmode
_except_handler3
_write
_initterm
_snprintf
comdlg32
GetOpenFileNameA
kernel32
DeviceIoControl
VirtualProtectEx
CompareStringW
GlobalAlloc
lstrlenA
LocalFileTimeToFileTime
lstrcmpiW
FileTimeToLocalFileTime
VirtualQuery
GetSystemTime
GetNumberFormatA
GetTempFileNameA
GetFileTime
SetHandleCount
user32
RegisterWindowMessageA
WinHelpA
SetScrollRange
RegisterClipboardFormatA
EqualRect
DestroyCursor
SetDlgItemTextA
CheckMenuItem
GetDCEx
wsprintfA
GetDC
GetMenuItemID
SetPropA
SetRect
ole32
ReleaseStgMedium
StringFromIID
CoRegisterClassObject
CoGetInterfaceAndReleaseStream
OleSetClipboard
CoDisconnectObject
StringFromGUID2
OleIsCurrentClipboard
CoRevokeClassObject
OleRun
IIDFromString
StgOpenStorageOnILockBytes
CoReleaseMarshalData
OleUninitialize
CoTaskMemRealloc
IsEqualGUID
CoUninitialize
advapi32
RegOpenKeyW
CryptHashData
RegEnumKeyW
AllocateAndInitializeSid
RegDeleteValueW
RegQueryValueA
RevertToSelf
CryptDestroyHash
RegEnumValueW
EqualSid
SetSecurityDescriptorGroup
RegDeleteKeyW
OpenSCManagerA
RegSetValueExA
comctl32
ImageList_Write
InitCommonControls
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_BeginDrag
ImageList_SetOverlayImage
CreatePropertySheetPageA
PropertySheetA
gdi32
SetColorAdjustment
GetDeviceCaps
PolyBezierTo
DPtoLP
Polyline
GetBrushOrgEx
InvertRgn
FillRgn
StretchBlt
GetBkColor
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ