Static task
static1
Behavioral task
behavioral1
Sample
c1ae38afb6c82b9107868d66318095f1c00f1e92dddc0ee953c23a8de4ace353.exe
Resource
win7-en-20211208
General
-
Target
c1ae38afb6c82b9107868d66318095f1c00f1e92dddc0ee953c23a8de4ace353
-
Size
287KB
-
MD5
ef45a5b40438205dc050f4afebc278b5
-
SHA1
6760ea10d2e201b688d841ee11c841653ede94f5
-
SHA256
c1ae38afb6c82b9107868d66318095f1c00f1e92dddc0ee953c23a8de4ace353
-
SHA512
fcceff6a644a09fdae46ffc306743277d6cc078c273b7dd6f85be97592aa23ca4631bf6564dbd130f9aaa38536066af3b61713a07984e9d7e0a9909cd635b021
-
SSDEEP
6144:HsqhZc6k5BusVeTiwoh1KVI7Qrqprps8WKAZUrNZ9vJ/U7eIglcw:H7hybyiwoh18Cru8WKAZUrNZ9vJ/Iex
Malware Config
Signatures
Files
-
c1ae38afb6c82b9107868d66318095f1c00f1e92dddc0ee953c23a8de4ace353.exe windows x86
ea237831c07125573d6c507ff4234a35
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winscard
SCardControl
user32
SetWindowLongW
SetCapture
InflateRect
GetMenuStringW
GetMenu
DefWindowProcW
SetWindowTextW
SetTimer
RegisterClassW
SendMessageW
DestroyMenu
PostMessageW
DestroyWindow
GetKeyState
GetCursorPos
TrackPopupMenu
DestroyIcon
MessageBeep
CreateWindowExW
LoadStringW
ReleaseCapture
GetActiveWindow
CreateWindowExA
SetActiveWindow
SetWindowPos
UnregisterClassA
GetClientRect
LoadIconA
ReleaseDC
kernel32
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
HeapReAlloc
HeapAlloc
InitializeCriticalSection
LoadLibraryExA
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
OutputDebugStringA
Sleep
GetACP
GetCPInfo
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
RaiseException
GetLocaleInfoW
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
GetCurrentThread
GetEnvironmentStrings
GetVersionExA
GetTickCount
VirtualAlloc
GetCommandLineA
GetEnvironmentStringsW
GetLastError
GetProcAddress
LoadLibraryW
SetHandleCount
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
GetOEMCP
GetModuleHandleW
CreateMutexW
GetVersionExW
CreateEventW
FreeEnvironmentStringsW
GetModuleHandleA
VirtualProtect
GetTimeZoneInformation
GetSystemTimeAsFileTime
SetEnvironmentVariableA
CompareStringW
CompareStringA
VirtualQuery
HeapFree
RtlUnwind
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThreadId
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
GetSystemInfo
gdi32
CreatePalette
advapi32
RegCreateKeyExA
ole32
OleCreate
CoUninitialize
OleInitialize
Sections
.text Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ