Static task
static1
Behavioral task
behavioral1
Sample
c9ce3e30a80f5006e9eb3d0c450591d7a9320b3aa27e077ff810c84ed9a93217.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c9ce3e30a80f5006e9eb3d0c450591d7a9320b3aa27e077ff810c84ed9a93217.exe
Resource
win10v2004-20220812-en
General
-
Target
c9ce3e30a80f5006e9eb3d0c450591d7a9320b3aa27e077ff810c84ed9a93217
-
Size
810KB
-
MD5
06f452b84ba7aebacf2bb2aaeac8ee06
-
SHA1
a7decda08687a3fa32ff56ded3831a663772dd19
-
SHA256
c9ce3e30a80f5006e9eb3d0c450591d7a9320b3aa27e077ff810c84ed9a93217
-
SHA512
44729f6b76406849f23fd0276c1d51249ad2341a9ed8132d99efb5c74a6b9fa07ad5bab7422e5df59a880316e90cf8897c0a584f56d38fff3de0b011721721c9
-
SSDEEP
12288:bapzMiF7OXKGHeS19fj3bhcDAi1y1HGRNd2POLR5rgGnQdX/pUtAOAml4T7yQ:MzLOhHem1OB0lG3MGpnQ9u1YP
Malware Config
Signatures
Files
-
c9ce3e30a80f5006e9eb3d0c450591d7a9320b3aa27e077ff810c84ed9a93217.exe windows x86
c39ab7f53b85501f7076c44ea20156fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetConsoleAliasW
GetFileTime
LeaveCriticalSection
VirtualProtect
GetFileAttributesA
CreateDirectoryA
SetLocalTime
GetProcessHeap
GetConsoleMode
CreateFileW
LocalFree
GetStartupInfoW
GetCurrentThreadId
GetModuleFileNameA
GetDriveTypeW
LocalLock
DeleteFileW
CancelIo
HeapDestroy
InterlockedExchange
FindAtomA
CreateFileW
DeleteFileW
ReadConsoleW
user32
GetKeyState
GetSysColor
GetWindowLongA
LoadCursorA
IsZoomed
IsWindowEnabled
GetWindowDC
wsprintfA
PeekMessageA
GetWindowLongA
MessageBoxA
GetWindowTextA
DispatchMessageA
davclnt
NPGetCaps
DllCanUnloadNow
NPCloseEnum
DllGetClassObject
advapi32
IsValidSid
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 800KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE