Static task
static1
Behavioral task
behavioral1
Sample
1c7c0e1d7d99f72c60ec71f573197743697c654b46f4a1f993f6dea2c383bc9c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1c7c0e1d7d99f72c60ec71f573197743697c654b46f4a1f993f6dea2c383bc9c.exe
Resource
win10v2004-20220812-en
General
-
Target
1c7c0e1d7d99f72c60ec71f573197743697c654b46f4a1f993f6dea2c383bc9c
-
Size
2.7MB
-
MD5
d7a88dcb2fc02f54e947034a20f0516f
-
SHA1
0d4a4daa47564b18e54cc9c025ba1637444dee76
-
SHA256
1c7c0e1d7d99f72c60ec71f573197743697c654b46f4a1f993f6dea2c383bc9c
-
SHA512
22a81d47884064f8ea7db6fe0cfab627ba7b37f8e59fe90969a566453ee57e4f74e0adfd7596e3fe595906c33e2749dfeaf8da92516b9c43d4716ff840b7b8e7
-
SSDEEP
49152:sxIKxG+oZXYofIuNrsZVVY/g2jIbcYfWeBEcZ860L8RXyZ4k+R37IkXfBl:GGpjwrVH2MgYPyk86dyZ4NL
Malware Config
Signatures
Files
-
1c7c0e1d7d99f72c60ec71f573197743697c654b46f4a1f993f6dea2c383bc9c.exe windows x86
d7e15866d48d09c7d5327f7921cab6ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
Sleep
TerminateProcess
ReadFile
MultiByteToWideChar
FindFirstFileA
FindClose
GetModuleFileNameA
FindNextFileA
GetCurrentDirectoryA
CloseHandle
GetTempPathA
DeleteFileA
MoveFileExA
WaitForSingleObject
SetEvent
CreateProcessA
GetLastError
lstrcmpiA
GetProcAddress
LoadLibraryA
GetCurrentProcess
WritePrivateProfileStringA
OpenEventA
CreateMutexA
GetCurrentProcessId
ResumeThread
CreateThread
lstrcpyA
GetLogicalDrives
GetDriveTypeA
GetLogicalDriveStringsA
GetDiskFreeSpaceExA
VirtualFree
VirtualAlloc
FlushFileBuffers
CreateFileW
WriteConsoleW
SetFilePointer
GetFileSize
ProcessIdToSessionId
CreateFileA
SetStdHandle
HeapReAlloc
GetConsoleMode
GetConsoleCP
RtlUnwind
HeapFree
HeapAlloc
EncodePointer
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WideCharToMultiByte
LCMapStringW
RaiseException
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
GetStringTypeW
user32
GetSystemMetrics
DialogBoxParamA
MessageBoxA
SetWindowTextA
GetWindowRect
SendMessageA
GetDlgItem
EndDialog
SetWindowPos
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
SHGetSpecialFolderPathA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ