Static task
static1
Behavioral task
behavioral1
Sample
2c8d1d93bd6d0ed01b6a928c680313ef665b18d608e32a69b5b779ae3b2a0bb8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2c8d1d93bd6d0ed01b6a928c680313ef665b18d608e32a69b5b779ae3b2a0bb8.exe
Resource
win10v2004-20220812-en
General
-
Target
2c8d1d93bd6d0ed01b6a928c680313ef665b18d608e32a69b5b779ae3b2a0bb8
-
Size
424KB
-
MD5
eee3274679548c06979ded5905b22f19
-
SHA1
a6ae498a2207596b31beade4177d002913c2d6fe
-
SHA256
2c8d1d93bd6d0ed01b6a928c680313ef665b18d608e32a69b5b779ae3b2a0bb8
-
SHA512
d39c757c45a092e6a9811e1c60d514ff67fff3cce6a3957062eb46ce23dd4f208dca246bc7b43c7670f93080ba73030ff3ec616e6bcbaabeb41b2915a0afdc25
-
SSDEEP
12288:46h5mf3I2iwDzgn3Y5h6sriJdohhOcmQPPgpwfB3X:zXa3Kw/gnShkozOcmwPg6fR
Malware Config
Signatures
Files
-
2c8d1d93bd6d0ed01b6a928c680313ef665b18d608e32a69b5b779ae3b2a0bb8.exe windows x86
ddedb6c72e0fe6a602cc09e8a253b6bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
Sleep
FindFirstFileExA
VirtualProtect
ReleaseMutex
GetLocaleInfoA
GetStdHandle
GetLastError
GetCommandLineA
EnterCriticalSection
InterlockedExchange
GlobalFree
RaiseException
GetSystemDirectoryA
GetLogicalDrives
HeapCreate
GetACP
CloseHandle
SetErrorMode
SetEvent
ResetEvent
user32
GetFocus
FlashWindowEx
wsprintfA
GetCursorPos
ReleaseDC
GetWindow
ValidateRect
GetClassNameA
GetActiveWindow
IsIconic
FillRect
FrameRect
ShowWindow
GetParent
GetWindowTextA
BeginPaint
DrawTextA
SetForegroundWindow
EndPaint
dsound
DirectSoundCreate
DirectSoundCaptureCreate
GetDeviceID
DllGetClassObject
DirectSoundEnumerateA
clbcatq
CoRegCleanup
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ