Static task
static1
Behavioral task
behavioral1
Sample
c1ce841f108e3d84ad61967535e5b638a0cf82a33879cc9763ae61a85c30eb6b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c1ce841f108e3d84ad61967535e5b638a0cf82a33879cc9763ae61a85c30eb6b.exe
Resource
win10v2004-20220812-en
General
-
Target
c1ce841f108e3d84ad61967535e5b638a0cf82a33879cc9763ae61a85c30eb6b
-
Size
78KB
-
MD5
45eb0b97b2052af882ee0d7368058f20
-
SHA1
47ec51cf977b1218ce6343cd52a4980f920ecd49
-
SHA256
c1ce841f108e3d84ad61967535e5b638a0cf82a33879cc9763ae61a85c30eb6b
-
SHA512
5e954cdab8700a3a9a7cab1cd8ef90c2ed71c46f049bf6c8c476bc26d09035eea6800ba4d5b4cc1b063e6c428732814792449ad66245adfb2cbbf86a4aeba16f
-
SSDEEP
1536:qi8qvVGdtLCpIsUqItnVf5/rs/wjppAhpo24A:QqvOgQZsj3o24
Malware Config
Signatures
Files
-
c1ce841f108e3d84ad61967535e5b638a0cf82a33879cc9763ae61a85c30eb6b.exe windows x86
797a4d898f3deff6860bfe653900195d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateMailslotW
VirtualProtect
GetLocaleInfoA
GetTickCount
GetFileAttributesA
MapViewOfFile
IsBadWritePtr
FindClose
FindResourceA
RemoveDirectoryA
HeapSize
GetDriveTypeW
SetLastError
CreateDirectoryA
GetModuleHandleA
GetProcessHeap
GetExitCodeThread
CancelIo
GetFileAttributesA
IsValidCodePage
ResetEvent
user32
IsDialogMessageA
IsWindow
SetFocus
PeekMessageA
GetWindowTextW
DispatchMessageA
LoadImageW
LoadCursorA
GetCapture
PostMessageW
SetCursor
wsprintfA
GetWindowLongW
ipsmsnap
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
DllGetClassObject
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE