Static task
static1
Behavioral task
behavioral1
Sample
c51fe5073bd493c7e8d83365aace3f9911437a0f2ae80042ba01ea46b55d2624.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c51fe5073bd493c7e8d83365aace3f9911437a0f2ae80042ba01ea46b55d2624.exe
Resource
win10v2004-20220812-en
General
-
Target
c51fe5073bd493c7e8d83365aace3f9911437a0f2ae80042ba01ea46b55d2624.exe
-
Size
2.1MB
-
MD5
1444884faed804667d8c2bfa0d63ab13
-
SHA1
95e045446efb8c9983ebfd85e39b4be5d92c7a2a
-
SHA256
c51fe5073bd493c7e8d83365aace3f9911437a0f2ae80042ba01ea46b55d2624
-
SHA512
6451077b99c5f8ecc5c0ca88fe272156296beb91218b39ae28a086dba5e7e39813f044f9af0fedbb260941b1cd52fa237c098cbf4b2a822f08e3e98e934d0ecf
-
SSDEEP
24576:exK9XAfJfueGEhz5HGSwpo3bNRecnGqBJpLNbZxUosmmZZ5IMfd:hKJfuIRGSwpSpJZxG5L
Malware Config
Signatures
Files
-
c51fe5073bd493c7e8d83365aace3f9911437a0f2ae80042ba01ea46b55d2624.exe.exe windows x86
ee023fb4c1419cfcfd7fcebd75cef269
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegOpenKeyA
RegQueryValueExA
GetUserNameA
RegCreateKeyA
EqualSid
AllocateAndInitializeSid
CopySid
GetLengthSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegSetValueExA
user32
SendMessageA
GetCursorPos
GetForegroundWindow
GetCapture
GetQueueStatus
GetClipboardOwner
FindWindowA
kernel32
SetEndOfFile
GetTimeZoneInformation
CreateFileW
HeapQueryInformation
HeapSize
HeapReAlloc
SetStdHandle
SetEnvironmentVariableW
GetTickCount
GetProcAddress
WaitForMultipleObjects
GetStdHandle
ReadFile
WriteFile
GetConsoleMode
SetConsoleMode
LocalFileTimeToFileTime
GetSystemTimeAsFileTime
FreeLibrary
LoadLibraryExA
CloseHandle
GetLastError
GetOverlappedResult
SetEvent
WaitForSingleObject
CreateEventA
CreateThread
GetFileAttributesExA
GetSystemDirectoryA
LoadLibraryA
FormatMessageA
SetHandleInformation
FindClose
FindFirstFileA
FindNextFileA
QueryPerformanceCounter
GetProcessTimes
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetThreadTimes
GetWindowsDirectoryA
GlobalMemoryStatus
CreateFileA
LocalFree
WaitNamedPipeA
ConnectNamedPipe
CreateNamedPipeA
GetCurrentThreadId
MapViewOfFile
UnmapViewOfFile
LocalAlloc
CreateFileMappingA
GetFileType
CreatePipe
CreateProcessA
OpenProcess
ClearCommBreak
GetCommState
SetCommBreak
SetCommState
SetCommTimeouts
ReleaseMutex
CreateMutexA
GetEnvironmentVariableA
DeleteFileA
GetLocalTime
MultiByteToWideChar
WideCharToMultiByte
GetACP
GetOEMCP
GetCPInfo
IsDBCSLeadByteEx
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
RaiseException
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
GetModuleFileNameW
LoadLibraryExW
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
GetModuleHandleExW
WriteConsoleW
ExitProcess
GetCommandLineA
GetCommandLineW
HeapValidate
GetSystemInfo
OutputDebugStringW
SetConsoleCtrlHandler
ReadConsoleW
FlushFileBuffers
GetConsoleCP
GetFileSizeEx
SetFilePointerEx
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStringTypeW
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
DecodePointer
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 222KB - Virtual size: 221KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 168KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ