Static task
static1
Behavioral task
behavioral1
Sample
8261328ff4cace95dcbb5c6d44039e0f28da51a604dced05d653d552c7b57d57.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8261328ff4cace95dcbb5c6d44039e0f28da51a604dced05d653d552c7b57d57.exe
Resource
win10v2004-20221111-en
General
-
Target
8261328ff4cace95dcbb5c6d44039e0f28da51a604dced05d653d552c7b57d57
-
Size
112KB
-
MD5
6ca0a0effe88337788dd81301636e406
-
SHA1
c91117129e45371df0446c5a60b435ee41a9ca96
-
SHA256
8261328ff4cace95dcbb5c6d44039e0f28da51a604dced05d653d552c7b57d57
-
SHA512
cb26c0cb399e7a009bb3be690de5a89396d7142f8aa16cb0672d9d213bb956b259f26673d5a2cb1608197e4af05fdb8f3f1bd24e68c579a20806da1a4374b6a3
-
SSDEEP
384:FK/uhoOyZayuj9LQsz8BRC0TIBKP0k+BkyMpgYHHb:FQuhoOysyuj9LrY4E0NBVMpgYH7
Malware Config
Signatures
Files
-
8261328ff4cace95dcbb5c6d44039e0f28da51a604dced05d653d552c7b57d57.exe windows x86
a22518a16e77b3c0808e29de41e16adf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ddraw
DirectDrawCreateEx
mfc42d
ord1189
ord492
ord721
ord711
ord684
msvcrtd
exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
__dllonexit
__CxxFrameHandler
memset
_chkesp
_adjust_fdiv
_initterm
__setusermatherr
_controlfp
kernel32
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
user32
CreateWindowExA
LoadIconA
DefWindowProcA
PostQuitMessage
RegisterClassExA
LoadCursorA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
LoadImageA
gdi32
StretchBlt
DeleteDC
GetStockObject
GetObjectA
CreateCompatibleDC
DeleteObject
SelectObject
Sections
.text Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 667B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ