Static task
static1
Behavioral task
behavioral1
Sample
c1648e5581aae20fb20035b595be8ada.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c1648e5581aae20fb20035b595be8ada.exe
Resource
win10v2004-20220812-en
General
-
Target
c1648e5581aae20fb20035b595be8ada.exe
-
Size
538KB
-
MD5
c1648e5581aae20fb20035b595be8ada
-
SHA1
42b73a613b02ded08897f2dfa77b681b65ddfdf8
-
SHA256
01ba1c09d92de5ff4b04edef4fd71aca9473c009de8a433bc14583e476aaae38
-
SHA512
027089a2a352b864f001056d38b6cb36e513979050c5d36908d0d37b9b4e9a948dba68bb7f9156229478a31bb7e0ffb70d0776387401fae20066d8b79d9db5ce
-
SSDEEP
12288:lCjuH1KTxj0YvURk9DVz+v4AnhoYWGxBXxcVGrj4W:l4uH1AI1Rk9pzq4uasnXEc
Malware Config
Signatures
Files
-
c1648e5581aae20fb20035b595be8ada.exe.exe windows x86
db3ba5a38c467c1467d8cab70dfeeb13
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__setusermatherr
_initterm
_except_handler3
_onexit
_adjust_fdiv
__set_app_type
__p__fmode
__p__commode
__dllonexit
__getmainargs
__p___initenv
exit
_XcptFilter
toupper
_exit
rand
_controlfp
srand
_kbhit
kernel32
GetConsoleWindow
SetConsoleCursorPosition
EnumResourceTypesA
GetStdHandle
gdi32
GetTextExtentPoint32W
RectVisible
CreateDIBitmap
EnumMetaFile
GetCharWidthA
resutils
ResUtilResourceTypesEqual
ResUtilStopResourceService
ResUtilVerifyPropertyTable
ResUtilGetSzProperty
rpcrt4
NdrRpcSmClientFree
NdrProxyGetBuffer
RpcImpersonateClient
NdrConformantVaryingArrayMarshall
NdrAllocate
ws2_32
WSALookupServiceBeginW
WSASetServiceA
WSAAsyncGetHostByName
gethostbyname
WSAJoinLeaf
comdlg32
ChooseFontW
PrintDlgW
PrintDlgExW
user32
ShowWindow
DrawTextA
ShowWindowAsync
EmptyClipboard
PtInRect
OpenWindowStationA
mscms
AssociateColorProfileWithDeviceA
IsColorProfileTagPresent
GetStandardColorSpaceProfileA
wsnmp32
ord400
ord604
ord102
ord206
ord602
ord103
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
cUktnrwI Size: 512B - Virtual size: 328B
jdRZBdGB Size: 2KB - Virtual size: 1KB
htIvDjmU Size: 1024B - Virtual size: 917B
dfiJUGkA Size: 2KB - Virtual size: 1KB
PfsLlTkc Size: 6KB - Virtual size: 6KB
hsiqnNfc Size: 7KB - Virtual size: 7KB
gBkbxBZd Size: 512B - Virtual size: 52B
XYEfUOCO Size: 512B - Virtual size: 234B
JtuLbwAF Size: 1024B - Virtual size: 808B