Static task
static1
Behavioral task
behavioral1
Sample
c80c75bf12cd833142e03d88a55fb85380f946ab2142c121be9143fcef82f2cc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c80c75bf12cd833142e03d88a55fb85380f946ab2142c121be9143fcef82f2cc.exe
Resource
win10v2004-20220812-en
General
-
Target
c80c75bf12cd833142e03d88a55fb85380f946ab2142c121be9143fcef82f2cc
-
Size
208KB
-
MD5
72d1e984c0751df8c95f05d19813d32a
-
SHA1
736afdeb98459c5855c511c9d8a39bf83434038c
-
SHA256
c80c75bf12cd833142e03d88a55fb85380f946ab2142c121be9143fcef82f2cc
-
SHA512
1253bd17085dd546eb46cfce8a4abf7eb6029db96ae34ebce2c04c61ff4247447a027f8689f6b2dac1afc72e22e96a545fdceecf361450dcb41a070c149034ee
-
SSDEEP
3072:GS9YnDmBRjIZ6G5nq53g0neZ5qjpjmFB4P+wPHH0dU+KrVvwpQIWk3QdVu:GSCmP9sqg0eWjpjmFB2nPhrVSQZIQdI
Malware Config
Signatures
Files
-
c80c75bf12cd833142e03d88a55fb85380f946ab2142c121be9143fcef82f2cc.exe windows x86
8cf3d4afdb6bdc00ce2721b8aa498510
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetProcessHeap
lstrcmpA
SystemTimeToFileTime
GetLocaleInfoW
GetSystemDefaultLCID
CreateFileA
SetLastError
GetEnvironmentStringsW
WideCharToMultiByte
QueryPerformanceCounter
lstrcpyA
CloseHandle
LoadResource
GetLocalTime
GetVolumeInformationA
GetTickCount
GetCurrentProcess
MultiByteToWideChar
FreeResource
GetOEMCP
LockResource
GetCurrentProcessId
QueryDosDeviceA
GetProcessId
lstrlenA
HeapAlloc
DeviceIoControl
HeapFree
LoadLibraryW
FindResourceA
advapi32
RegOpenKeyW
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegQueryValueExW
quartz
AMGetErrorTextA
DllGetClassObject
DllRegisterServer
DllCanUnloadNow
DBToAmpFactor
AMGetErrorTextW
DllUnregisterServer
AmpFactorToDB
user32
wsprintfA
CharNextA
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ