Static task
static1
Behavioral task
behavioral1
Sample
0c7cb9aa57f2c6b2dd72ec01b2552a1cbeda5b5da161160bbc6149b3a7d7beed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0c7cb9aa57f2c6b2dd72ec01b2552a1cbeda5b5da161160bbc6149b3a7d7beed.exe
Resource
win10v2004-20220901-en
General
-
Target
0c7cb9aa57f2c6b2dd72ec01b2552a1cbeda5b5da161160bbc6149b3a7d7beed
-
Size
464KB
-
MD5
42ac4695e41ece7d92eaa3fb4bbe4ae9
-
SHA1
fa8ffaf7107d451634d29175a0b27be01914adc5
-
SHA256
0c7cb9aa57f2c6b2dd72ec01b2552a1cbeda5b5da161160bbc6149b3a7d7beed
-
SHA512
377f52defdb6b306b806a7571409d2ee71ab7fc7b4b57656eb39b9f6f177d943765e3f85eba643dd6451d31dd98a8bcf2120ba4242f3f7ee91d9dffd998a41b3
-
SSDEEP
6144:JEvWzbIPVsq2szpGcMtlkLCGpZBPY+vYWMyTLR3jtv/BiXInVKESvp8ud7qFhtYJ:OvWA6fszu4WG/rx7T40VG6Dj
Malware Config
Signatures
Files
-
0c7cb9aa57f2c6b2dd72ec01b2552a1cbeda5b5da161160bbc6149b3a7d7beed.exe windows x86
f8ffaf652e50847cbd5b5da82433b117
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
LoadTypeLi
user32
FillRect
LoadCursorA
DestroyIcon
InflateRect
IsDlgButtonChecked
PostMessageW
UpdateWindow
OffsetRect
IsWindow
SystemParametersInfoA
GetWindowThreadProcessId
TrackPopupMenuEx
SetRect
DestroyWindow
RegisterClassW
CloseClipboard
CreateMenu
CreateWindowExW
GetSystemMetrics
GetWindowDC
CopyRect
wsprintfW
GetScrollPos
SetFocus
CreateDialogIndirectParamW
GetClientRect
DispatchMessageW
CallNextHookEx
RegisterClassExW
IsWindowEnabled
ShowWindow
MessageBoxW
SetWindowPos
DefWindowProcW
SystemParametersInfoW
DeferWindowPos
DrawFrameControl
IsChild
DestroyCaret
mfc42
ord1576
gdi32
CreateSolidBrush
SetPixel
CreateCompatibleDC
RoundRect
LineTo
shell32
SHBrowseForFolderA
ShellExecuteExA
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
ShellExecuteA
advapi32
RegOpenKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegCloseKey
RegDeleteValueA
DuplicateTokenEx
ole32
CLSIDFromString
OleSaveToStream
CreateILockBytesOnHGlobal
CLSIDFromProgID
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
OleFlushClipboard
OleLockRunning
DoDragDrop
StringFromCLSID
OleCreateStaticFromData
OleInitialize
OleGetClipboard
CoRegisterMessageFilter
kernel32
LeaveCriticalSection
GetModuleHandleA
HeapAlloc
TlsFree
InterlockedIncrement
WriteFile
SetConsoleCtrlHandler
TerminateProcess
GetFileType
FreeEnvironmentStringsW
MultiByteToWideChar
TlsGetValue
GetCommandLineW
CompareStringW
CreateMutexW
ExitProcess
GetStdHandle
CloseHandle
GetCurrentProcessId
TlsSetValue
GetCPInfo
HeapFree
InitializeCriticalSection
SetLastError
GetSystemTimeAsFileTime
FatalAppExitA
SetEnvironmentVariableA
FreeEnvironmentStringsA
GetCurrentThread
GetModuleFileNameA
RtlUnwind
InterlockedExchange
VirtualFree
GetEnvironmentStringsW
DeleteCriticalSection
VirtualQuery
InterlockedDecrement
GetModuleHandleW
IsBadWritePtr
GetSystemTime
GetEnvironmentStrings
GetCommandLineA
GetStartupInfoW
HeapDestroy
GetTimeZoneInformation
GetCurrentProcess
GetTickCount
LCMapStringA
SetHandleCount
IsBadCodePtr
HeapReAlloc
GetProcAddress
GetStringTypeA
VirtualAlloc
SetUnhandledExceptionFilter
RaiseException
FlushFileBuffers
GetStringTypeW
CompareStringA
GetLocalTime
UnhandledExceptionFilter
GetStartupInfoA
LoadLibraryA
GetCurrentThreadId
SetStdHandle
ReadFile
GetVersion
IsBadReadPtr
WideCharToMultiByte
EnterCriticalSection
GetLastError
LCMapStringW
QueryPerformanceCounter
HeapCreate
GetModuleFileNameW
SetFilePointer
TlsAlloc
Sections
.text Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ