Static task
static1
Behavioral task
behavioral1
Sample
c85608257046e75238df2a2dbce3632d4f71f758db61a76ccaf18a08ec6c05b5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c85608257046e75238df2a2dbce3632d4f71f758db61a76ccaf18a08ec6c05b5.exe
Resource
win10v2004-20220812-en
General
-
Target
c85608257046e75238df2a2dbce3632d4f71f758db61a76ccaf18a08ec6c05b5
-
Size
204KB
-
MD5
3f28df9d3f4ec4924fcb8e0e4f48a8a0
-
SHA1
51b1586cee1dd970b38856dd130e540a6cabae8a
-
SHA256
c85608257046e75238df2a2dbce3632d4f71f758db61a76ccaf18a08ec6c05b5
-
SHA512
95c6543c5a540c2fb902384bda1c8db7c7a619c00d5231f60730d9cd1297192cfd898b50cc614b579185a1cbf954f2972f5fd5b3ef57fb09f3b171e66d1c0c75
-
SSDEEP
3072:lC9syMtv9NAkyNtlqmzgWPGBfje9ciDcVZNlt1CLKQClXta4MoOfOizyG:MsNtFNAkyNSNWC7evi7CLKV+4GtuG
Malware Config
Signatures
Files
-
c85608257046e75238df2a2dbce3632d4f71f758db61a76ccaf18a08ec6c05b5.exe windows x86
229404d35ae8a847016ca7c9a9fa35d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoGetCallContext
CoDisconnectObject
CoImpersonateClient
CoRevertToSelf
CoInitialize
CoInitializeSecurity
CoUninitialize
CoSuspendClassObjects
CoCreateInstance
CoTaskMemRealloc
CoRegisterClassObject
CoRevokeClassObject
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
oleaut32
SysAllocString
LoadTypeLi
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
SysFreeString
shlwapi
PathFindExtensionA
advapi32
GetLengthSid
EqualSid
GetTokenInformation
OpenProcessToken
OpenThreadToken
IsValidSecurityDescriptor
AccessCheck
GetSidLengthRequired
InitializeSid
GetSidSubAuthority
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
MakeAbsoluteSD
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
IsValidSid
CopySid
AddAce
InitializeAcl
GetAclInformation
InitializeSecurityDescriptor
GetSecurityDescriptorControl
GetSecurityDescriptorSacl
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
GetSecurityDescriptorOwner
kernel32
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetOEMCP
GetCPInfo
IsBadReadPtr
IsBadCodePtr
GetProcessHeap
SetFilePointer
SetStdHandle
FlushFileBuffers
InterlockedDecrement
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
GetLastError
InitializeCriticalSection
DeleteCriticalSection
GetVersion
lstrcmpiA
lstrlenW
lstrlenA
FreeLibrary
GetProcAddress
LoadLibraryA
IsBadWritePtr
InterlockedIncrement
lstrcpynA
lstrcpyA
GetModuleFileNameA
lstrcatA
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GetCurrentThreadId
GetCommandLineA
CloseHandle
GetCurrentThread
GetCurrentProcess
OpenProcess
GetTickCount
GetCurrentProcessId
GetStartupInfoA
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitProcess
RtlUnwind
HeapReAlloc
TerminateProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
user32
CharNextA
PostThreadMessageA
DispatchMessageA
GetMessageA
LoadStringA
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE