Static task
static1
Behavioral task
behavioral1
Sample
2f212c4ce36065a2697c4ad3ab9599fdd854413bb01cf3524ccaf108e4c6559c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2f212c4ce36065a2697c4ad3ab9599fdd854413bb01cf3524ccaf108e4c6559c.exe
Resource
win10v2004-20220901-en
General
-
Target
2f212c4ce36065a2697c4ad3ab9599fdd854413bb01cf3524ccaf108e4c6559c
-
Size
70KB
-
MD5
e774735fccf2a65968734be12200efc3
-
SHA1
d8ded913b71e7ca2a38591b70b0a0f1d75e093df
-
SHA256
2f212c4ce36065a2697c4ad3ab9599fdd854413bb01cf3524ccaf108e4c6559c
-
SHA512
3372fd0e936d06ef1ee0e56c7be19f1a97714f908c1259c5a6064631c2a999f9d5b5953dfd1493cf1b042c06ae0690ccd73e9413a972283f9235e73856dc4892
-
SSDEEP
1536:WFRPrwcE4qT5yEAFlisqwmcPAAfdOL+DuYeq4Br+D2X32YMgBIwIuY:d4isqwmuAAfd4+2aLYMzN
Malware Config
Signatures
Files
-
2f212c4ce36065a2697c4ad3ab9599fdd854413bb01cf3524ccaf108e4c6559c.exe windows x86
c6b6eee4e6a35153d66d5851ebd16877
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc40
ord2527
ord3647
ord5363
ord3577
ord1540
ord3890
ord2528
ord4653
ord2086
ord4608
ord5647
ord3837
ord4696
ord2324
ord1445
ord3314
ord4296
ord3917
ord2323
ord1785
ord5649
ord3268
ord4510
ord1494
ord2140
ord1850
ord4691
ord2617
ord2754
ord2843
ord3945
ord2744
ord2845
ord2620
ord2696
ord3345
ord3346
ord3340
ord2694
ord3580
ord4101
ord3909
ord600
ord702
ord713
ord571
ord318
ord499
ord476
ord351
ord731
ord3642
ord3067
ord1035
ord2181
ord2304
ord2303
ord5492
ord5203
ord5314
ord1843
ord1815
ord5214
ord4845
ord2962
ord1846
ord3938
ord4668
ord2707
ord5500
ord3313
ord4089
ord4086
ord4084
ord3761
ord5648
ord3963
ord2234
ord2197
ord5070
ord3431
ord965
ord4627
ord2097
ord2909
ord4713
ord4715
ord2390
ord3579
ord4165
ord4719
ord4703
ord5053
ord4096
ord3906
ord3259
ord721
ord504
ord549
ord1041
ord1014
ord2238
ord4714
ord4635
ord292
ord5752
ord2311
ord873
ord469
ord3655
ord2299
ord1060
ord1100
ord4681
ord3859
ord4312
ord4450
ord4173
ord2199
ord5360
ord3578
ord1539
ord4657
ord4694
ord3922
ord4677
ord3907
ord3134
ord570
ord3643
ord3659
ord4543
ord4093
ord4463
ord862
ord5158
ord3186
ord4163
ord2675
ord2681
ord5612
ord2195
ord2224
ord4659
ord5079
ord1510
ord4934
ord2774
ord3929
ord3902
ord4407
ord3870
ord3007
ord2789
ord5385
ord5470
ord4097
ord3908
ord3185
ord3112
ord3214
ord3158
ord578
ord626
ord375
ord325
ord4282
ord4817
ord5656
ord4961
ord957
ord1426
ord4316
ord2100
ord4975
ord1627
ord2403
ord2456
ord5124
ord3630
ord3784
ord5207
ord5123
ord5420
ord4826
ord5665
ord2115
ord4088
ord4087
ord1675
ord3749
ord4065
ord4357
ord4521
ord3826
ord3833
ord4347
ord4007
ord4021
ord4019
ord4002
ord4005
ord4000
ord4416
ord4413
ord3606
ord4656
ord4704
ord3267
ord1492
ord3913
ord690
ord466
ord4676
ord3274
ord3382
ord2218
ord545
ord2515
ord285
ord5296
ord2510
ord1817
ord4186
ord5429
ord5507
ord2081
ord4994
ord3715
ord3944
ord3755
ord2877
ord5451
ord2215
ord3849
ord3561
ord4844
ord3618
ord2090
ord4531
ord1477
ord1482
ord4650
ord5642
ord4693
ord4509
ord4664
ord2138
ord3251
ord3043
ord5215
ord2563
ord2961
ord3145
ord582
ord724
ord509
ord3762
ord3786
ord2676
ord2091
ord2388
ord3731
ord265
ord1599
ord729
ord4145
ord4140
ord2913
ord3790
ord3947
ord4548
ord4545
ord1583
ord3727
ord315
ord3724
ord5005
ord1368
msvcrt40
_setmbcp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
_initterm
__p__acmdln
exit
__CxxFrameHandler
_itoa
atoi
strstr
printf
_controlfp
_exit
_XcptFilter
__dllonexit
_onexit
kernel32
CreateThread
ReadFile
WriteFile
Sleep
GetVersion
GetModuleHandleA
GetStartupInfoA
GetStdHandle
CloseHandle
user32
GetDC
GetCapture
SetRect
SetCapture
InvalidateRect
EnableWindow
LoadIconA
SendMessageA
KillTimer
PostMessageA
SetTimer
ReleaseCapture
gdi32
CreateBrushIndirect
CreateSolidBrush
CreatePen
Rectangle
Ellipse
RoundRect
SelectObject
GetTextMetricsA
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ