Static task
static1
Behavioral task
behavioral1
Sample
94183c37d26b278a43d7328072999d522ee3b6073ae3aa799bbcff6392c280a1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
94183c37d26b278a43d7328072999d522ee3b6073ae3aa799bbcff6392c280a1.exe
Resource
win10v2004-20220901-en
General
-
Target
94183c37d26b278a43d7328072999d522ee3b6073ae3aa799bbcff6392c280a1
-
Size
42KB
-
MD5
cc424d942fae4f7108f100bf3bb18de4
-
SHA1
f4c46b240068518fb947ff9d834ad35da9283cb1
-
SHA256
94183c37d26b278a43d7328072999d522ee3b6073ae3aa799bbcff6392c280a1
-
SHA512
a8edc635c45bd63a9b9dc842b2467165112c086075f479c850ba7e831ebe00a64d3b3abc5ea8b20d096acb77b91a2f273ecb648c9caff2c6a6d9c963d29c7a34
-
SSDEEP
768:trw7HyBaemYGrjw0A4WFl7SnvYZ7HyU044UQzUw:UyBannrk0APlywZOAcf
Malware Config
Signatures
Files
-
94183c37d26b278a43d7328072999d522ee3b6073ae3aa799bbcff6392c280a1.exe windows x86
0e5cab8ae524406eefd60566721bf997
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassNameA
FindWindowExA
CharUpperBuffA
GetWindowLongA
GetDC
GetForegroundWindow
GetClientRect
SendMessageA
MessageBoxA
kernel32
lstrlenA
CreateThread
GetCommandLineA
CreateFileA
GetVersionExA
VirtualProtect
lstrcpyA
ReadFile
VirtualAlloc
GetFileTime
GetLastError
GetModuleHandleA
GetTickCount
DeleteFileA
lstrcmpiA
GetLocaleInfoA
TerminateThread
VirtualFree
SetEndOfFile
CreateProcessA
SetFilePointer
CloseHandle
WideCharToMultiByte
GetProcAddress
WriteFile
ExitProcess
LoadLibraryA
lstrcatA
GetFileSize
lstrlenW
lstrcmpA
Sleep
gdi32
GetPixel
CreateCompatibleDC
SelectObject
DeleteDC
BitBlt
CreateDCA
DeleteObject
CreateDIBSection
GetDIBits
SetPixel
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_INIT_ Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE