Static task
static1
Behavioral task
behavioral1
Sample
0c09ea2d5722a2484804bf8c4f051d66d8a95d23c19e5d1277a55cafd80b67be.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0c09ea2d5722a2484804bf8c4f051d66d8a95d23c19e5d1277a55cafd80b67be.exe
Resource
win10v2004-en-20220113
General
-
Target
0c09ea2d5722a2484804bf8c4f051d66d8a95d23c19e5d1277a55cafd80b67be
-
Size
128KB
-
MD5
f35cd516f71e2cc4ade549a6487624ca
-
SHA1
64800a2f85e12090eea5109e05d969a08ae9850a
-
SHA256
0c09ea2d5722a2484804bf8c4f051d66d8a95d23c19e5d1277a55cafd80b67be
-
SHA512
866a549f65cc25c73b0087cf1fd769446f1d82aa38b24e211f6e517b481c02ee3d607055aaeab6be199a42e50f917920675f4c5079e7cf83606154165bdbb3fb
-
SSDEEP
3072:Z8WppjkWHlpxLzWjY3R6WVYGy5z3sAHcYwi5C7wSyCw7IEFf:xoWhzH34WVpxiRpE
Malware Config
Signatures
Files
-
0c09ea2d5722a2484804bf8c4f051d66d8a95d23c19e5d1277a55cafd80b67be.exe windows x86
a40e692fc2df9875eb927637f7c2b500
Code Sign
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegOpenKeyA
RegEnumKeyExA
RegSetValueA
RegCreateKeyA
RegOpenKeyExA
comctl32
ImageList_LoadImageA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
comsvcs
GetObjectContext
kernel32
GetLastError
WaitForSingleObject
lstrlenW
CloseHandle
ExpandEnvironmentStringsA
LocalReAlloc
GetStringTypeA
CreateFileA
WriteFile
WaitForMultipleObjects
GetUserDefaultLCID
FormatMessageW
VerSetConditionMask
LocalAlloc
UnhandledExceptionFilter
GetStdHandle
lstrcpynW
lstrcpyW
RtlUnwind
GetStringTypeW
FindNextChangeNotification
QueryPerformanceCounter
DeviceIoControl
FreeLibrary
GetFileSize
GetSystemTimeAsFileTime
lstrlenA
SetConsoleMode
VirtualAlloc
InitializeCriticalSection
HeapAlloc
GetLocaleInfoA
GetSystemInfo
OutputDebugStringA
GetConsoleMode
QueryPerformanceFrequency
VerifyVersionInfoW
lstrcpynA
FormatMessageA
GetModuleHandleA
lstrcmpiA
LeaveCriticalSection
GetProcAddress
CompareFileTime
SetFilePointer
GetFileAttributesExA
LCMapStringW
GetLocaleInfoW
FindFirstFileA
InterlockedIncrement
GetCurrentProcessId
VirtualQuery
Sleep
HeapReAlloc
GetCurrentThreadId
GetFileAttributesA
ReadFile
LocalFree
GetTickCount
GetDateFormatW
MultiByteToWideChar
FileTimeToSystemTime
GetLocalTime
GetModuleFileNameA
FindClose
SetUnhandledExceptionFilter
lstrcmpiW
InterlockedExchange
GetFileInformationByHandle
DeleteCriticalSection
LoadLibraryExA
LoadLibraryW
LCMapStringA
InterlockedDecrement
GetVersionExA
VirtualProtectEx
WideCharToMultiByte
FindNextFileA
ReadConsoleW
GetCurrentProcess
VirtualProtect
WriteConsoleW
IsDBCSLeadByte
GetCPInfo
GetComputerNameExW
GetCurrentThread
SetCriticalSectionSpinCount
VirtualFree
LoadLibraryA
SetThreadPriority
TerminateProcess
FindFirstChangeNotificationA
HeapFree
SetLastError
CreateEventA
GetTimeFormatW
EnterCriticalSection
lstrcatW
FindCloseChangeNotification
lstrcmpW
SetEvent
mpr
WNetCancelConnection2W
WNetAddConnection2W
WNetGetLastErrorW
msvcrt
strrchr
wcsstr
_purecall
wcsncmp
__setusermatherr
wcscpy
wcschr
swprintf
fprintf
wcscat
_wcsicmp
free
strpbrk
malloc
strtoul
strstr
wcstok
wcstoul
calloc
wcsrchr
strncat
_CxxThrowException
wcstol
_stat
_c_exit
_controlfp
realloc
__CxxFrameHandler
?terminate@@YAXXZ
_itoa
__winitenv
atoi
wcsspn
rand
vsprintf
sprintf
memmove
__wgetmainargs
_cexit
_onexit
_XcptFilter
_timezone
_wasctime
_ultow
strchr
_stricmp
_exit
wcspbrk
_initterm
_strdup
time
__dllonexit
isspace
strtok
exit
_endthreadex
wcsncpy
_wcsnicmp
srand
localtime
__set_app_type
wcslen
strncpy
_iob
strncmp
iswctype
_beginthreadex
wcstod
fflush
netapi32
NetServerGetInfo
NetApiBufferFree
ntdll
RtlFreeHeap
NtDeviceIoControlFile
RtlCopyUnicodeString
NtClose
RtlInitUnicodeString
RtlCharToInteger
DbgPrint
RtlUnicodeStringToAnsiString
NtCreateFile
RtlAllocateHeap
ole32
StringFromCLSID
CoCreateInstance
CoUninitialize
CoCreateFreeThreadedMarshaler
CoInitialize
CoInitializeEx
CoInitializeSecurity
CoTaskMemFree
CoTaskMemAlloc
rpcrt4
UuidToStringA
secur32
GetUserNameExW
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
shlwapi
wnsprintfA
StrTrimW
StrCatBuffA
user32
wsprintfW
LoadStringW
CheckDlgButton
DialogBoxParamA
EndDialog
GetWindowLongA
SetDlgItemTextA
GetParent
GetMessagePos
SendDlgItemMessageA
MessageBoxA
CharNextA
ScreenToClient
IsDlgButtonChecked
PostMessageA
GetClientRect
LoadStringA
SetWindowLongA
EnableWindow
MessageBeep
SendMessageA
GetWindowTextA
LoadIconA
CharUpperW
winmm
timeGetTime
ws2_32
WSAConnect
Sections
.text Size: 114KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 748B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ