Static task
static1
Behavioral task
behavioral1
Sample
c7bd89918b2bcb6254fcda41e86b02365ece93de2144f32016d272881668a465.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c7bd89918b2bcb6254fcda41e86b02365ece93de2144f32016d272881668a465.exe
Resource
win10v2004-20220812-en
General
-
Target
c7bd89918b2bcb6254fcda41e86b02365ece93de2144f32016d272881668a465
-
Size
120KB
-
MD5
894588845a8c11b3e71fb7107dddead2
-
SHA1
0680dd64e8edc04d72b5928a3c8363798f1dcbec
-
SHA256
c7bd89918b2bcb6254fcda41e86b02365ece93de2144f32016d272881668a465
-
SHA512
2585950ffb44f74f342a076f9127e454620c2b7fedce4dcb3929faf575c39d33f9efd8442d838918909d6ccbbd4b16d64e69a185c50883ad22b8c1023830623d
-
SSDEEP
1536:syB5lNBok9WKhS5cvNmVVbBh3UYLTV+exA+GDlS77O8a6aHSa6Z:D6k9WKhQCmVVtFnAexABDU7W6aHSpZ
Malware Config
Signatures
Files
-
c7bd89918b2bcb6254fcda41e86b02365ece93de2144f32016d272881668a465.exe windows x86
67c1568095ce574f75d3e6d46f4cb9ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
malloc
sqrt
srand
pow
wcstol
strlen
log
memmove
abs
kernel32
GetCommandLineA
EnumCalendarInfoA
ExitThread
IsBadReadPtr
GetCommandLineW
GetModuleHandleW
GetCurrentThread
VirtualAlloc
GetACP
GetModuleHandleA
LoadLibraryExA
GetProcAddress
LoadLibraryA
GetCPInfo
ExitProcess
lstrlenA
DeleteCriticalSection
GetOEMCP
version
GetFileVersionInfoSizeA
user32
GetScrollInfo
GetWindowPlacement
GetKeyboardState
DeleteMenu
ShowWindow
ShowScrollBar
CharNextA
DefFrameProcA
InsertMenuItemA
GetMenuItemID
GetWindowRect
SetClipboardData
KillTimer
EnableScrollBar
SetScrollPos
AdjustWindowRectEx
LoadBitmapA
OpenClipboard
SetCapture
MapVirtualKeyA
SendMessageA
BeginPaint
ole32
StgCreateDocfileOnILockBytes
CoCreateGuid
CoGetMalloc
CoReleaseMarshalData
CoDisconnectObject
CoFreeUnusedLibraries
OleRun
CoUninitialize
WriteClassStm
CLSIDFromString
comdlg32
GetFileTitleA
GetSaveFileNameA
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ