Static task
static1
Behavioral task
behavioral1
Sample
c18a6631b7909411f06f091c443b4d482d9b248226074f0f013ad3b850a73fb6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c18a6631b7909411f06f091c443b4d482d9b248226074f0f013ad3b850a73fb6.exe
Resource
win10v2004-20220812-en
General
-
Target
c18a6631b7909411f06f091c443b4d482d9b248226074f0f013ad3b850a73fb6
-
Size
117KB
-
MD5
89b022b93ec81edc733b942ee0fc57cc
-
SHA1
f4b5923b7d3d99781c159289360a78b123713608
-
SHA256
c18a6631b7909411f06f091c443b4d482d9b248226074f0f013ad3b850a73fb6
-
SHA512
368d1487c9f4f6b2696daab93ef90268763aa8c6c3f5f06cefd5f7629daa1e22d993a076382d86c66b0dc1a5b712d191716b24fa81c129601272daf889f4755b
-
SSDEEP
3072:HqWx9yQUoXbcHI1XoAVw9/F+Y3jEd6rkpKT4zwzNYI:/yQFLcko2wFYd6RTmXI
Malware Config
Signatures
Files
-
c18a6631b7909411f06f091c443b4d482d9b248226074f0f013ad3b850a73fb6.exe windows x86
f9748ed90e0c964068b044725c4dc5e8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetIconSize
ImageList_DragMove
ImageList_DragLeave
ImageList_Merge
ImageList_AddMasked
ImageList_EndDrag
ImageList_ReplaceIcon
ImageList_GetDragImage
InitCommonControls
ImageList_DragEnter
ImageList_BeginDrag
ImageList_DragShowNolock
ImageList_GetImageRect
ImageList_AddIcon
ImageList_Read
ImageList_DrawIndirect
ImageList_LoadImageW
user32
DrawTextW
GetFocus
CreateIcon
AlignRects
DrawTextA
AppendMenuA
LoadMenuA
InsertMenuA
CopyImage
CopyIcon
GetDC
AppendMenuW
EndDialog
CalcMenuBar
DrawIconEx
CloseWindow
DialogBoxParamW
LoadMenuA
BlockInput
CreateIcon
DialogBoxParamA
AppendMenuA
CopyRect
DrawIcon
GetWindowTextA
DrawTextW
IsWindow
DrawIconEx
GetWindowTextLengthA
GetFocus
EndDialog
LoadCursorA
advapi32
RegQueryValueExW
RegReplaceKeyA
RegQueryInfoKeyA
RegQueryValueW
RegCreateKeyW
RegEnumKeyW
RegQueryInfoKeyW
RegFlushKey
RegDeleteKeyW
RegLoadKeyA
RegQueryValueExA
RegEnumKeyExW
RegOpenKeyA
RegOpenKeyW
RegDeleteValueA
RegGetKeySecurity
kernel32
GetCommandLineA
lstrcpynA
GetStdHandle
GlobalFree
GetModuleHandleA
HeapAlloc
lstrcmpiA
WideCharToMultiByte
GetDateFormatA
GetCPInfo
SetLastError
FreeLibrary
CloseHandle
GlobalAlloc
DeleteFileA
lstrcmpA
GetFileAttributesA
GetFileType
GetLastError
GetStringTypeA
Sections
.KPSlh Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rpvp Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.HvGSfN Size: 4KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.AavbxB Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ