Static task
static1
Behavioral task
behavioral1
Sample
c18c8641a9c6bff37b8180bc8b55615cdf4cbd44b1f65e947d1ec6cbfd0cd435.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c18c8641a9c6bff37b8180bc8b55615cdf4cbd44b1f65e947d1ec6cbfd0cd435.exe
Resource
win10v2004-20220812-en
General
-
Target
c18c8641a9c6bff37b8180bc8b55615cdf4cbd44b1f65e947d1ec6cbfd0cd435
-
Size
30KB
-
MD5
e7c2924245656e346e0887833a918b39
-
SHA1
9a71e6c1ae07661bf0340db8cd9a1616b95f98aa
-
SHA256
c18c8641a9c6bff37b8180bc8b55615cdf4cbd44b1f65e947d1ec6cbfd0cd435
-
SHA512
4db0f81872e1360e196a086e42e99ef5dac5b6d66b1fd6a1c19e6e930b401d352a8779bb088deefacd67466b37f4e112ba04b74edd3b2a3979169ccf0d7e91d1
-
SSDEEP
384:cp0MUYDd9mJLy9QsOZOFiYWYWZy5OpmDqv1OirQ4t03XjOpWjGYIVRN1HX4R1hGg:8/mU2LVYWYWIMpiir3KKcjGYaz1IL
Malware Config
Signatures
Files
-
c18c8641a9c6bff37b8180bc8b55615cdf4cbd44b1f65e947d1ec6cbfd0cd435.exe windows x86
22fa2ddc9f31a4e87b03d8a57d2869b4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetBinaryTypeW
CloseHandle
ReadFile
SetFilePointer
GetFileSize
GetModuleFileNameA
GetBinaryTypeA
GetModuleHandleA
AddAtomW
GetProcessHeap
HeapAlloc
VirtualAlloc
VirtualFree
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingA
GetProcAddress
LoadLibraryA
AddAtomA
HeapFree
ExitProcess
user32
ClientToScreen
CreateAcceleratorTableA
GetShellWindow
FlashWindow
CloseWindow
SetWinEventHook
GetDC
GetDesktopWindow
ValidateRgn
SetRectEmpty
CharToOemBuffW
wvsprintfA
IsRectEmpty
SetWindowLongW
VkKeyScanW
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA
DefWindowProcA
WaitMessage
ReleaseDC
CreateMDIWindowW
SetWindowPlacement
gdi32
GetTextFaceA
GetBkColor
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 424B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ