Static task
static1
Behavioral task
behavioral1
Sample
1cff7bc48538e89d3d16fd8c1ececb9b89adbd55e456b6de2599a3c462f415b0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1cff7bc48538e89d3d16fd8c1ececb9b89adbd55e456b6de2599a3c462f415b0.exe
Resource
win10v2004-20220901-en
General
-
Target
1cff7bc48538e89d3d16fd8c1ececb9b89adbd55e456b6de2599a3c462f415b0
-
Size
82KB
-
MD5
5500dc2663c3629ad49156f5022cbe46
-
SHA1
5baf1f1c29cedeec0838f2be1bfd63a7dd0dee45
-
SHA256
1cff7bc48538e89d3d16fd8c1ececb9b89adbd55e456b6de2599a3c462f415b0
-
SHA512
225390f6028e33b419ce84bb8f2ec02655ff33e9c08cd57200d0c50b8b78563fec285540e07b85e322bf1ab56ea934d9e005dc2c6745ad307eeb35c25636a8c1
-
SSDEEP
1536:VIl6IVt7ag6f3axa4pJngzMSY+A37feaCMJDmYsLIb4PvYqHB/AdG4:VIYIVt72Ks4pJngzMSDADeak7dJHB/Az
Malware Config
Signatures
Files
-
1cff7bc48538e89d3d16fd8c1ececb9b89adbd55e456b6de2599a3c462f415b0.exe windows x86
9db85b58f1193567a2aa95c8fab29bfa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
CopyFileA
ExitProcess
GetPrivateProfileIntA
GetModuleFileNameA
LocalFree
LocalAlloc
GetFileAttributesA
FindFirstFileA
GetACP
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetPrivateProfileSectionA
SetFileAttributesA
GetWindowsDirectoryA
GetSystemDirectoryA
WideCharToMultiByte
HeapFree
GetOEMCP
GetStringTypeA
GetCPInfo
WriteFile
lstrlenA
VirtualFree
MoveFileExA
GetProcessHeap
HeapAlloc
WritePrivateProfileSectionA
lstrcmpiA
GetVersionExA
lstrcpyA
lstrcatA
LoadLibraryA
VirtualAlloc
LCMapStringW
LCMapStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapCreate
RtlUnwind
FreeEnvironmentStringsA
GetStringTypeW
MultiByteToWideChar
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
user32
ReleaseDC
wsprintfA
PostMessageA
GetDC
gdi32
GetFontData
DeleteObject
SelectObject
AddFontResourceA
EnumFontFamiliesExA
CreateFontIndirectA
advapi32
RegQueryValueExA
RegQueryInfoKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
RegCloseKey
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ