Static task
static1
Behavioral task
behavioral1
Sample
c1a5548e6a1db5793ff8a6850841a10200f0eba2016557e520356fcf3e4b2b37.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c1a5548e6a1db5793ff8a6850841a10200f0eba2016557e520356fcf3e4b2b37.exe
Resource
win10v2004-20220901-en
General
-
Target
c1a5548e6a1db5793ff8a6850841a10200f0eba2016557e520356fcf3e4b2b37
-
Size
702KB
-
MD5
07ba25b3fd9c040286e905e8aac6b128
-
SHA1
1456f8c17e0a92d383e091d636815c15e1fb0e6c
-
SHA256
c1a5548e6a1db5793ff8a6850841a10200f0eba2016557e520356fcf3e4b2b37
-
SHA512
2ff5b2f730a686d158dff7af739302b1207ce2755784bc54732455c8291f6cf4da2752512752b779300f09b9102f457bd6888060e53962143853c68f92fc4cdf
-
SSDEEP
12288:KEpV4xWzINXiC2QWEtnJB7TRKqc7zcfqyRq:KEHzINyC3PJb7NKH7zuq1
Malware Config
Signatures
Files
-
c1a5548e6a1db5793ff8a6850841a10200f0eba2016557e520356fcf3e4b2b37.exe windows x86
452f0d4f76ce0d2149d809ccb9ef71c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VariantChangeType
SafeArrayUnaccessData
SafeArrayCreate
SafeArrayGetLBound
kernel32
ExitProcess
GlobalReAlloc
GetPrivateProfileStringW
lstrcmpA
GetDriveTypeW
FindFirstFileW
FlushFileBuffers
GetSystemInfo
CreateMutexA
WritePrivateProfileSectionA
GetCurrentProcess
GetThreadPriority
WriteFile
SetHandleCount
GetTempPathW
IsValidLocale
LoadLibraryExA
SwitchToFiber
SetSystemTime
GetCommState
Beep
GetStringTypeExW
GetACP
GetDateFormatA
GetSystemTimeAsFileTime
FlushConsoleInputBuffer
_llseek
IsProcessorFeaturePresent
VirtualProtect
GlobalUnlock
SetEnvironmentVariableA
GetBinaryTypeA
FatalAppExitA
EnumDateFormatsW
ReadConsoleInputW
user32
FillRect
SwapMouseButton
IsDialogMessageW
GetSysColorBrush
ole32
CoReleaseServerProcess
OleInitialize
comctl32
ImageList_EndDrag
ImageList_Add
ImageList_SetOverlayImage
ImageList_DragShowNolock
msvcrt
_getpid
sscanf
iswctype
fscanf
_fsopen
_tempnam
vwprintf
_endthreadex
fputc
_popen
_mkdir
toupper
rewind
vfwprintf
_waccess
Sections
.text Size: 315KB - Virtual size: 315KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 372KB - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ