Static task
static1
Behavioral task
behavioral1
Sample
798561acf5be661b262aef21e94b99291fafa75d5b6d89b4b207307d7576daed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
798561acf5be661b262aef21e94b99291fafa75d5b6d89b4b207307d7576daed.exe
Resource
win10v2004-20220901-en
General
-
Target
798561acf5be661b262aef21e94b99291fafa75d5b6d89b4b207307d7576daed
-
Size
134KB
-
MD5
88f599552d7613ac11f34172e85f9816
-
SHA1
9d87173a5b7c421d8a19a4a0f0a069d2ade8549f
-
SHA256
798561acf5be661b262aef21e94b99291fafa75d5b6d89b4b207307d7576daed
-
SHA512
be3d111682775457034b098c755366656af4ecb99d63dcd11ceedc6ead02059101a3fe7097b2eaf4894811e7bd9402708f2b4ac80a5fcbc58856b2638819d0b5
-
SSDEEP
1536:FyR3MHmQ7B0PewSnesIsfqx4+dsb0TUi990XXAHy+b+4kZB5b8Mkqwsj803feqO:FqEjm5oqxP6XdQHNbyn5bLkqvjjmqO
Malware Config
Signatures
Files
-
798561acf5be661b262aef21e94b99291fafa75d5b6d89b4b207307d7576daed.exe windows x86
a33986527e4f4e9dfe2db99512818f09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
cadlib
?DelDoc@CCadDoc@@SAXPAV1@@Z
tsmodel
?SetScaleTo@CSettings@@QAEXH@Z
user32
BeginPaint
gdi32
CreateSolidBrush
comdlg32
GetOpenFileNameA
advapi32
RegCreateKeyExA
shell32
DragQueryFileA
ole32
CoTaskMemAlloc
oleaut32
VarUI4FromStr
comctl32
_TrackMouseEvent
Sections
.text Size: 96KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iJ���u� Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE