Static task
static1
Behavioral task
behavioral1
Sample
c229c2549bdd86a46a4508b0d4e9d427b658b147fc4467f54804d99cbea461d9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c229c2549bdd86a46a4508b0d4e9d427b658b147fc4467f54804d99cbea461d9.exe
Resource
win10v2004-20220901-en
General
-
Target
c229c2549bdd86a46a4508b0d4e9d427b658b147fc4467f54804d99cbea461d9
-
Size
256KB
-
MD5
7b55752f95d6b8432fb9abe10bf8e2fa
-
SHA1
896c0fc364f4c85600a4bdf7e68187546461fb79
-
SHA256
c229c2549bdd86a46a4508b0d4e9d427b658b147fc4467f54804d99cbea461d9
-
SHA512
59c75c9055b35ccf651c3fb7aeb5c311884a68009475aae852e0d042a299a3059e99d9f72ce4b506dd7a49780402533b8ac69c4839664cae4358923064501276
-
SSDEEP
6144:kgx1fDn3xxzvQphc0Z6CP08cdtEzz9jJDXsPBY++h:b1fDn3xxzvf0wSvst+zdFm21h
Malware Config
Signatures
Files
-
c229c2549bdd86a46a4508b0d4e9d427b658b147fc4467f54804d99cbea461d9.exe windows x86
a0d3d93aee5c7f02878aba91fb2e3acb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
AddAtomA
GetUserDefaultLangID
GetOEMCP
ReleaseMutex
IsDBCSLeadByte
GetThreadLocale
GetExitCodeThread
TlsFree
GetModuleHandleA
GetThreadPriority
GetHandleContext
CancelWaitableTimer
SetEvent
GetConsoleCP
GetThreadTimes
CompareStringA
CreatePipe
GetLargestConsoleWindowSize
TlsGetValue
VirtualAlloc
user32
ValidateRect
GetWindowTextA
ReleaseDC
ReleaseDC
GetActiveWindow
GetDC
GetForegroundWindow
InvalidateRect
IsWindowVisible
GetWindow
GetClassNameA
GetFocus
GetWindowTextLengthA
GetSystemMetrics
RegisterClassA
ShowWindow
IsIconic
CloseWindow
GetClassInfoExA
dsound
DirectSoundEnumerateA
DllCanUnloadNow
DirectSoundCreate
GetDeviceID
DllGetClassObject
mscms
CheckColors
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 900KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ