Static task
static1
Behavioral task
behavioral1
Sample
a6be1612c45fe9c08e1c0cb7efd5132f603b0890fc35c183b40a79919589c979.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a6be1612c45fe9c08e1c0cb7efd5132f603b0890fc35c183b40a79919589c979.exe
Resource
win10v2004-20221111-en
General
-
Target
a6be1612c45fe9c08e1c0cb7efd5132f603b0890fc35c183b40a79919589c979
-
Size
692KB
-
MD5
2040d190d5439b06ebc127b0fabd0b28
-
SHA1
6061cc540cf4729e37e99e15e08ce4d20e8e6677
-
SHA256
a6be1612c45fe9c08e1c0cb7efd5132f603b0890fc35c183b40a79919589c979
-
SHA512
90c7508e542e21226d285befc858f376ea93cbd4a42299bcc75ada10632f4e713a23bae02e1d195a2800855c6ea4091d6d32ef5aaf72a568dbf2c022e16a61d1
-
SSDEEP
12288:QzRVqypUDkzrm42YFyMjLQoJD4v4sBiUF6YnxNelw9YwgD32XNLquL9P:Q3quzrm4pjLQoJkHDF6Yelwy4q2
Malware Config
Signatures
Files
-
a6be1612c45fe9c08e1c0cb7efd5132f603b0890fc35c183b40a79919589c979.exe windows x86
4fca8823b7807f4ad78739a5ddb179aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetVersion
GetStartupInfoA
CreateEventA
GetVersionExA
lstrcpyA
GetLastError
lstrlenA
GetCommandLineA
CloseHandle
GlobalAlloc
GetFileSize
LocalFree
msvcrt
_XcptFilter
memmove
_exit
__getmainargs
wcslen
wcstoul
gdi32
GetTextColor
SetBkMode
GetStockObject
GetObjectA
MoveToEx
ExtTextOutA
GetTextMetricsA
DeleteObject
CreateCompatibleDC
GetBkColor
GetDeviceCaps
CreateSolidBrush
GetTextExtentPoint32A
LineTo
GetPixel
BitBlt
SelectObject
CreateFontIndirectA
SetROP2
PatBlt
SetPixel
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 686KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ