Static task
static1
Behavioral task
behavioral1
Sample
2ce95cc8f999b3a5d68fd15590b73be3fac539d32d413ab512647d430545af63.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
2ce95cc8f999b3a5d68fd15590b73be3fac539d32d413ab512647d430545af63.exe
Resource
win10v2004-20220414-en
General
-
Target
2ce95cc8f999b3a5d68fd15590b73be3fac539d32d413ab512647d430545af63
-
Size
180KB
-
MD5
5cc95e2bb59719af4a42972d89cf8ba8
-
SHA1
c25c6137dd5a7afe4eb97fe3968ccbbe4436b841
-
SHA256
2ce95cc8f999b3a5d68fd15590b73be3fac539d32d413ab512647d430545af63
-
SHA512
d2cd972729eb2fe438e92fca32bb368445ab6ba367b115f6ab014f22fa307efe06704537e6074e33126ab3e8ea3fedd84abf6423f7a4b73cb023a3ec7c207e70
-
SSDEEP
3072:LI5ZlfXoGEya1coFMaB9T88V1NNyF24GczsSCkHNdF/QVAe1:E5ZVUSK9TfV1P7Ozs+Nv/Q11
Malware Config
Signatures
Files
-
2ce95cc8f999b3a5d68fd15590b73be3fac539d32d413ab512647d430545af63.exe windows x86
39897146d355ae211fc1e256b5e01dce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLongPathNameW
FatalAppExitA
GetFileAttributesExW
GetLocaleInfoW
GetComputerNameW
GetNumberFormatA
CreateFileA
AddAtomW
GetSystemTime
CreateActCtxA
SetSystemTime
advapi32
ChangeServiceConfigW
InitiateSystemShutdownA
CreateProcessAsUserW
RegSetValueA
AdjustTokenPrivileges
RevertToSelf
SetSecurityDescriptorOwner
LookupAccountNameW
GetKernelObjectSecurity
SetSecurityDescriptorSacl
RegSetValueExW
InitializeSid
QueryServiceStatus
OpenSCManagerW
RegSetValueExA
SetSecurityDescriptorGroup
LookupPrivilegeValueW
AllocateAndInitializeSid
RegEnumKeyW
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
StartServiceA
RegCreateKeyExW
GetAce
OpenProcessToken
RegQueryInfoKeyW
RegRestoreKeyW
RegisterEventSourceA
RegQueryValueA
SetFileSecurityA
RegOpenKeyExA
RegisterServiceCtrlHandlerA
RegEnumKeyExA
StartServiceCtrlDispatcherW
SetFileSecurityW
AddAce
CopySid
StartServiceCtrlDispatcherA
GetSidIdentifierAuthority
RegCreateKeyW
OpenThreadToken
RegOpenKeyExW
RegCreateKeyA
CloseServiceHandle
DeleteService
user32
LockWindowUpdate
RemoveMenu
SetWindowPos
DrawTextExA
IsChild
DrawTextW
GetProcessWindowStation
CloseDesktop
ShowScrollBar
CharUpperA
MessageBeep
LoadStringW
CreateDialogIndirectParamA
GetMenuState
SetCursor
GetDC
VkKeyScanW
TranslateAcceleratorW
DialogBoxIndirectParamW
GetDlgItemInt
BeginDeferWindowPos
CreateWindowExW
GetWindowLongA
DestroyCursor
DialogBoxParamA
CloseClipboard
GetMenuItemCount
UnionRect
GetSystemMetrics
CheckMenuItem
IsWindowEnabled
ShowWindow
GetClipboardFormatNameW
PtInRect
SetClassLongA
BringWindowToTop
LoadIconA
RegisterHotKey
WaitMessage
GetGUIThreadInfo
SetWindowLongW
CharPrevW
SendNotifyMessageW
TranslateMDISysAccel
GetKeyboardLayoutList
TrackPopupMenu
ChildWindowFromPointEx
AdjustWindowRect
SendDlgItemMessageA
LoadMenuW
GetCaretPos
GetClassInfoW
LoadBitmapA
EnumDisplaySettingsW
ReleaseDC
SetWindowPlacement
GetWindow
ShowCursor
FindWindowExW
MapWindowPoints
DestroyMenu
GetCursorPos
DeferWindowPos
LoadBitmapW
CreateMenu
FindWindowW
SetScrollPos
LoadImageA
RegisterWindowMessageA
IsWindow
GetSysColorBrush
ChangeClipboardChain
IsWindowVisible
GetMessageA
SystemParametersInfoA
DefFrameProcW
InvalidateRect
GetScrollInfo
RemovePropA
GetForegroundWindow
GetLastActivePopup
PostMessageW
TranslateMessage
GetClassInfoExW
IsIconic
DispatchMessageW
DdeConnect
SetDlgItemInt
SetWindowTextA
CharNextW
CharLowerBuffA
DrawIcon
SetRect
GetWindowTextLengthA
SetActiveWindow
CreateDialogIndirectParamW
CharToOemA
AttachThreadInput
OffsetRect
TrackPopupMenuEx
DrawStateA
GetDlgItem
SetFocus
SetRectEmpty
GetCapture
CharNextA
SetDlgItemTextW
EnableWindow
CopyIcon
MessageBoxA
MoveWindow
CopyImage
IntersectRect
PostQuitMessage
SetKeyboardState
ValidateRect
RegisterClipboardFormatA
GetScrollPos
CharLowerW
GetDlgItemTextW
DrawIconEx
mouse_event
GetParent
CharPrevA
MapDialogRect
SystemParametersInfoW
GetClassNameA
SetMenu
SetClassLongW
WinHelpA
wvsprintfA
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ