Static task
static1
Behavioral task
behavioral1
Sample
c6cf21d4d00ab958682cbb35018732dd53fc787526c1603a7d2e81891efe2629.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c6cf21d4d00ab958682cbb35018732dd53fc787526c1603a7d2e81891efe2629.exe
Resource
win10v2004-20220812-en
General
-
Target
c6cf21d4d00ab958682cbb35018732dd53fc787526c1603a7d2e81891efe2629
-
Size
81KB
-
MD5
893de10a8a1130e2e5d928360481cd72
-
SHA1
3ca167738f76df5b5478241e0711e3eed5ebd383
-
SHA256
c6cf21d4d00ab958682cbb35018732dd53fc787526c1603a7d2e81891efe2629
-
SHA512
fc7fe993ca87f8e183ef0dbd4fdafdb0fd2edf7d48997c26a2649983deb7a0322792c5edc8c78f9f402eb12abe0809ab7218b16a14d436acc5e314cd2e7caabf
-
SSDEEP
1536:apbwiYUEsH1CT4JE89exS0Xin0o2AteJbIzTsFde:QbwD+1AU9e0kW0oPWbIzTsFde
Malware Config
Signatures
Files
-
c6cf21d4d00ab958682cbb35018732dd53fc787526c1603a7d2e81891efe2629.exe windows x86
5eed596fd945af7b264d791fe02635ea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
lstrcpyA
GetACP
FreeLibrary
GetACP
lstrcatA
GetACP
ExitProcess
GetACP
GetCommandLineA
GetACP
lstrcpynA
GetACP
GetLastError
GetACP
GetStdHandle
GetACP
GetCPInfo
GetACP
GetConsoleCP
GetModuleFileNameA
lstrcmpA
GetDateFormatA
lstrcpyA
GetLocalTime
lstrlenA
lstrcmpiA
GlobalFree
GetStringTypeA
GetFileAttributesA
GetLastError
GetModuleHandleA
lstrcatA
GetCPInfo
Sleep
GetStringTypeW
lstrcpynA
GetFileSize
WideCharToMultiByte
advapi32
RegLoadKeyA
RegReplaceKeyA
RegCreateKeyExA
RegEnumValueW
RegEnumValueA
RegEnumKeyExW
RegOpenKeyA
RegDeleteKeyW
RegQueryValueExA
RegEnumKeyA
RegDeleteValueW
RegOpenKeyExW
RegQueryValueA
RegQueryValueW
RegDeleteValueA
RegQueryInfoKeyW
RegQueryValueExW
RegEnumKeyW
RegFlushKey
user32
DialogBoxParamA
EndDialog
GetWindowTextLengthA
LoadMenuA
DrawIcon
CalcMenuBar
GetMenu
AppendMenuA
LoadCursorA
CopyImage
CopyRect
CopyIcon
CreateIcon
IsWindow
DrawIconEx
AppendMenuW
DrawTextW
AlignRects
GetFocus
InsertMenuA
Sections
.tadt Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.raata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eddaa Size: 10KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bas Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
.rddc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ