Static task
static1
Behavioral task
behavioral1
Sample
c70ea4a1f4cc8ce98434bf75da78d50b173c8090117e5074c95690ea1f200c1f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c70ea4a1f4cc8ce98434bf75da78d50b173c8090117e5074c95690ea1f200c1f.exe
Resource
win10v2004-20220812-en
General
-
Target
c70ea4a1f4cc8ce98434bf75da78d50b173c8090117e5074c95690ea1f200c1f
-
Size
97KB
-
MD5
6a2c6cbbf3b6614700ed8bac80362095
-
SHA1
16c5c3897eb887d68cde9fa115ad4b7e777a79ee
-
SHA256
c70ea4a1f4cc8ce98434bf75da78d50b173c8090117e5074c95690ea1f200c1f
-
SHA512
85387747221ca1f066fbe9ebbd9d8b67942cd44f77f218e93b17e0ba89db9880a48b3c144aef0f314b804bbf7a00158b41df9a9c0a9ff680b33ef454362fe043
-
SSDEEP
1536:o8YG+Yl6rhROR1d7EOAVHKK1LFO4J/n+KOLzCEPZEDIStEuOPCuTJolo4naeb:dfPGOkHtLFO4p+6EPuiKuTJoa4naeb
Malware Config
Signatures
Files
-
c70ea4a1f4cc8ce98434bf75da78d50b173c8090117e5074c95690ea1f200c1f.exe windows x86
79abf76ebccaba135a066f5e0cde12eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsContentTypeA
SHQueryInfoKeyA
SHQueryValueExA
SHStrDupA
PathIsDirectoryA
SHSetValueA
PathGetCharTypeA
SHEnumValueA
kernel32
CreateFileA
LoadLibraryA
GetProcessHeap
GetACP
LocalAlloc
MoveFileExA
WaitForSingleObject
GetCurrentProcessId
Sleep
DeleteCriticalSection
VirtualFree
GetCurrentThread
lstrcpyA
GetOEMCP
VirtualAlloc
GetFileAttributesA
ExitProcess
WideCharToMultiByte
GetStringTypeW
ExitThread
lstrlenA
FindResourceA
GetModuleHandleA
gdi32
SelectPalette
GetDCOrgEx
SetTextColor
GetRgnBox
user32
EqualRect
GetMenuItemCount
SetWindowTextA
GetFocus
EndPaint
IsWindowVisible
EnableWindow
FindWindowA
ClientToScreen
IsChild
IsWindowEnabled
DrawIcon
FillRect
GetForegroundWindow
GetClassLongA
GetLastActivePopup
GetDlgItem
GetCapture
CallNextHookEx
DrawFrameControl
GetCursor
GetSysColor
DrawIconEx
GetMessagePos
GetKeyState
BeginDeferWindowPos
GetKeyNameTextA
GetMenu
DrawMenuBar
GetActiveWindow
MessageBoxA
CreateWindowExA
GetParent
EnableScrollBar
GetScrollInfo
CreatePopupMenu
DispatchMessageW
ShowWindow
SetCursor
BeginPaint
DeferWindowPos
GetClientRect
IsMenu
CheckMenuItem
CharNextA
GetMenuItemID
HideCaret
CharToOemA
FrameRect
GetSysColorBrush
DefWindowProcA
EndDeferWindowPos
GetDCEx
GetIconInfo
ShowScrollBar
IsDialogMessageA
GetSubMenu
DefMDIChildProcA
SetWindowPos
EnableMenuItem
RegisterClassA
SetTimer
GetWindowTextA
CharLowerA
GetClassInfoA
EnumThreadWindows
TrackPopupMenu
GetWindow
GetCursorPos
CreateIcon
GetPropA
GetDC
CallWindowProcA
GetMenuItemInfoA
GetMenuState
SetWindowLongA
CharLowerBuffA
GetClipboardData
GetScrollRange
CreateMenu
GetScrollPos
EnumChildWindows
DrawEdge
DispatchMessageA
DefFrameProcA
GetDesktopWindow
ntdll
wcscat
atol
msvcrt
rand
atol
tolower
calloc
memmove
sqrt
wcstol
memcpy
_acmdln
wcschr
swprintf
srand
mbstowcs
sprintf
advapi32
GetUserNameA
RegEnumValueA
RegCreateKeyA
oleaut32
RegisterTypeLib
SysAllocStringLen
SafeArrayGetElement
SysReAllocStringLen
VariantCopyInd
SysStringLen
GetErrorInfo
SafeArrayGetUBound
VariantChangeType
version
GetFileVersionInfoSizeA
VerInstallFileA
VerQueryValueA
Sections
text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ