Static task
static1
Behavioral task
behavioral1
Sample
c195e78926e93591dbfd268749a023787f0b1c6a4f80cef9d64f3de8af84d8ec.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c195e78926e93591dbfd268749a023787f0b1c6a4f80cef9d64f3de8af84d8ec.exe
Resource
win10v2004-20220901-en
General
-
Target
c195e78926e93591dbfd268749a023787f0b1c6a4f80cef9d64f3de8af84d8ec
-
Size
344KB
-
MD5
eec41f112bfd2de5b7ac5f89c6ae9559
-
SHA1
6196d94d90a9b6e3d8e30c841ef41f8425293b4d
-
SHA256
c195e78926e93591dbfd268749a023787f0b1c6a4f80cef9d64f3de8af84d8ec
-
SHA512
2fdaf12910a152d4f0db8654918faa4de33f44cbc39c18754e021cafd2a0ccfaa68a4e0e9a49698e8e9c5df61692f070d6c37ccfb59a2009c96569602f845f2e
-
SSDEEP
6144:CdwNXESAe0XWKuz119RDYswsebRRuN3S4uhCx86CoiFDY+7OHwT1T:0wFES10XelRDtwLbRRu8j9siFpywT1
Malware Config
Signatures
Files
-
c195e78926e93591dbfd268749a023787f0b1c6a4f80cef9d64f3de8af84d8ec.exe windows x86
13ff5e56bd205c5dfadea4609c6dd71d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMenuItemInfoA
GetCursorPos
EnableWindow
CharToOemA
PtInRect
UnregisterClassA
DrawFrameControl
SetCapture
ClientToScreen
RemovePropA
CloseClipboard
MapWindowPoints
RemoveMenu
TranslateMDISysAccel
InsertMenuItemA
SetClassLongA
ShowOwnedPopups
GetWindowLongA
LoadKeyboardLayoutA
GetClassNameA
SetForegroundWindow
PeekMessageA
GetMessagePos
IntersectRect
DefWindowProcA
OemToCharA
UpdateWindow
SetPropA
InsertMenuA
EqualRect
ShowScrollBar
GetSystemMenu
GetSubMenu
MessageBoxA
GetMenuStringA
CharNextW
FindWindowA
FillRect
GetKeyboardState
DispatchMessageA
GetFocus
GetClipboardData
CreatePopupMenu
ShowWindow
IsDialogMessageA
CharUpperBuffA
ChildWindowFromPoint
LoadBitmapA
GetWindowRect
CharLowerA
GetWindowDC
GetKeyboardLayoutNameA
SetWindowLongW
ReleaseDC
GetKeyState
TranslateMessage
GetScrollPos
GetWindowLongW
IsIconic
SetWindowTextA
SetRect
GetDesktopWindow
PostMessageA
GetWindowPlacement
DestroyMenu
GetScrollInfo
InflateRect
GetSysColorBrush
GetClassInfoA
RedrawWindow
CreateIcon
ActivateKeyboardLayout
shlwapi
PathIsContentTypeA
PathIsDirectoryA
PathGetCharTypeA
SHDeleteKeyA
SHDeleteValueA
SHStrDupA
PathFileExistsA
SHGetValueA
gdi32
GetPaletteEntries
GetRgnBox
GetPixel
ole32
CoCreateFreeThreadedMarshaler
CLSIDFromString
CoUninitialize
ReleaseStgMedium
WriteClassStm
MkParseDisplayName
StringFromIID
CoCreateInstanceEx
kernel32
LoadLibraryA
GetProcAddress
LocalAlloc
VirtualAllocEx
IsBadReadPtr
lstrlenA
GetACP
ExitProcess
GlobalAlloc
GetCommandLineA
GetModuleHandleA
ExitThread
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc9 Size: 1024B - Virtual size: 531B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc8 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc4 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc0 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ