Static task
static1
Behavioral task
behavioral1
Sample
4c05abc9575dd47c613a5c8fc0a7def995722a6594f7a26e0ef02e5206a6dd0c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4c05abc9575dd47c613a5c8fc0a7def995722a6594f7a26e0ef02e5206a6dd0c.exe
Resource
win10v2004-20220812-en
General
-
Target
4c05abc9575dd47c613a5c8fc0a7def995722a6594f7a26e0ef02e5206a6dd0c
-
Size
325KB
-
MD5
ce60baaba610df62f07e7384f8f4791b
-
SHA1
201fb94ecc60b18e7ad3346466eab625a4895043
-
SHA256
4c05abc9575dd47c613a5c8fc0a7def995722a6594f7a26e0ef02e5206a6dd0c
-
SHA512
3019e965579f354c090acf57ef357bb08473152acca84e1f6d99f29200bf55eb2155efd48e90a9e3cf503a3c471730a32ecc1dd9ee6a36cafde6774a693ac371
-
SSDEEP
6144:OBOvHz5SAIKhTOwnAXN1mZ3sN0Ivmt4Wtt0EXHX8gYaqn5j0otwmlljHBQffN:OBOD1AxiIuFt0EX3PqhSsH
Malware Config
Signatures
Files
-
4c05abc9575dd47c613a5c8fc0a7def995722a6594f7a26e0ef02e5206a6dd0c.exe windows x86
24a86fab9d284a16e94c174465da2ebe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetSystemCursor
GetUserObjectInformationW
RegisterClassExA
RegisterClassA
wininet
FtpCommandA
advapi32
CryptSetProvParam
CryptHashData
CryptSetHashParam
CryptSignHashW
LookupPrivilegeValueA
RegEnumValueW
RegOpenKeyW
CryptHashSessionKey
LookupAccountSidW
RegConnectRegistryA
RegCreateKeyExW
LookupPrivilegeNameW
RegQueryInfoKeyA
RegEnumKeyW
RegDeleteValueA
RegRestoreKeyA
RegCreateKeyW
InitializeSecurityDescriptor
LookupSecurityDescriptorPartsW
CryptContextAddRef
CryptEnumProvidersA
ReportEventA
comctl32
DrawStatusTextW
ImageList_Copy
ImageList_GetFlags
DrawInsert
ImageList_EndDrag
CreatePropertySheetPage
CreateToolbar
InitCommonControlsEx
CreatePropertySheetPageW
ImageList_Create
ImageList_SetBkColor
ImageList_LoadImageW
ImageList_LoadImageA
CreatePropertySheetPageA
ImageList_Replace
ImageList_SetFilter
CreateUpDownControl
CreateToolbarEx
kernel32
TlsFree
SetHandleCount
GetACP
LCMapStringW
GetModuleFileNameW
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCPInfo
VirtualProtect
IsValidCodePage
GetSystemInfo
GetDateFormatA
HeapCreate
WriteFile
GetTempFileNameA
GetOEMCP
TlsSetValue
HeapReAlloc
VirtualAlloc
VirtualFree
SetLastError
GetProcAddress
RtlUnwind
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
SetStdHandle
IsValidLocale
GetCurrentProcess
HeapDestroy
GetCurrentProcessId
ReadFile
GetVersionExA
HeapSize
FreeEnvironmentStringsW
OpenMutexA
GetTimeFormatA
GetCurrentThreadId
GetTimeZoneInformation
SetEnvironmentVariableA
CompareStringA
SetFilePointer
HeapAlloc
HeapFree
ExitProcess
GetCommandLineW
WritePrivateProfileSectionW
CreateMutexA
GetStartupInfoA
GetModuleHandleA
TerminateProcess
GetStringTypeA
InitializeCriticalSection
EnumSystemLocalesA
FlushFileBuffers
GetUserDefaultLCID
GetStringTypeW
IsBadWritePtr
FreeEnvironmentStringsA
GetCommandLineA
GetLastError
DeleteCriticalSection
LoadLibraryA
GetModuleFileNameA
VirtualQuery
GetStartupInfoW
GetLocaleInfoW
InterlockedExchange
ExitThread
GetFileType
TlsAlloc
GetTickCount
QueryPerformanceCounter
GetLocaleInfoA
TlsGetValue
EnterCriticalSection
LCMapStringA
GetEnvironmentStrings
GetCurrentThread
FlushConsoleInputBuffer
GetLogicalDrives
CompareStringW
LeaveCriticalSection
WriteConsoleInputW
GetEnvironmentStringsW
GetStdHandle
GetPrivateProfileIntA
Sections
.text Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ