?g_civ_R_IVSEBX_D_YCgbZ#ERPAFPAD@Z
Static task
static1
Behavioral task
behavioral1
Sample
e1550d88b40994429a0d330913cec52157f205b0a0c43cf1e02a355175417e07.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e1550d88b40994429a0d330913cec52157f205b0a0c43cf1e02a355175417e07.exe
Resource
win10v2004-20220812-en
General
-
Target
e1550d88b40994429a0d330913cec52157f205b0a0c43cf1e02a355175417e07
-
Size
199KB
-
MD5
a17b5bb901a05361c481592695c700b8
-
SHA1
023f683c2f2e170becc933cc4252eb7512a89dd4
-
SHA256
e1550d88b40994429a0d330913cec52157f205b0a0c43cf1e02a355175417e07
-
SHA512
d23bb772d730a766594df988ce520b8a81973562fa93fd805d9eebed54a7fa198563f7e60aefeeb66715ef613d55b6e4783506e7bd484896757d69532c674962
-
SSDEEP
3072:Q0nblhhhFzciOqEbK4f2a9TEMnRJszRB3rqu6WrzNdN0D9GC0dlv78NLgQ7zXd6D:lK5Ntczz2u6WHNaGC0dB49cZ
Malware Config
Signatures
Files
-
e1550d88b40994429a0d330913cec52157f205b0a0c43cf1e02a355175417e07.exe windows x86
dffe23bc426a6a6f9979c9cfca613dcf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetStretchBltMode
StretchDIBits
CreatePen
CreateFontW
CreateHalftonePalette
GetNearestColor
SetBitmapDimensionEx
CreatePolygonRgn
GetSystemPaletteEntries
IntersectClipRect
LPtoDP
TextOutA
EndPath
kernel32
LoadLibraryW
GetStringTypeExW
ExitProcess
FindResourceExW
SystemTimeToFileTime
GetCurrentProcessId
FindNextFileW
ClearCommBreak
SetThreadExecutionState
GlobalMemoryStatusEx
GetThreadPriority
LoadLibraryExA
HeapLock
GetShortPathNameW
lstrcatA
LockResource
WinExec
AddAtomW
shlwapi
StrDupA
user32
IsRectEmpty
HiliteMenuItem
GetKeyboardLayoutList
GetWindowLongW
InternalGetWindowText
OemToCharBuffA
CheckDlgButton
GetKeyboardType
GetScrollPos
PostThreadMessageW
DrawIconEx
PostMessageW
GetWindowTextA
GetUserObjectInformationW
GetCaretPos
SetWindowTextW
DragObject
LoadImageW
GetUpdateRect
CharUpperA
MessageBoxW
InsertMenuItemW
CreateWindowExA
GetDialogBaseUnits
FindWindowW
CreateCaret
IsCharUpperA
IsWindowUnicode
msvcrt
exit
Exports
Exports
Sections
.text Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pics Size: 512B - Virtual size: 81B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.picd Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.picb Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.picc Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.help Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.virt Size: - Virtual size: 309KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ