Static task
static1
Behavioral task
behavioral1
Sample
2c2cc31b0509156eadc17e4ef92d6a2e0ca1752a5c3762b5c701d28d287abc6b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2c2cc31b0509156eadc17e4ef92d6a2e0ca1752a5c3762b5c701d28d287abc6b.exe
Resource
win10v2004-20220812-en
General
-
Target
2c2cc31b0509156eadc17e4ef92d6a2e0ca1752a5c3762b5c701d28d287abc6b
-
Size
123KB
-
MD5
4f312447b1f23608026e3f0d13a81ba1
-
SHA1
1a690fc969d0763548a2103cdfc5fd7fd5390ecd
-
SHA256
2c2cc31b0509156eadc17e4ef92d6a2e0ca1752a5c3762b5c701d28d287abc6b
-
SHA512
78688b407948a84ea9d91b50f34b1d734193d5328e284eb1e153efd25410924da954b832b1800c00333fafdff43252131755473e4f81eb82916b49ed5da91906
-
SSDEEP
3072:7OmXfhQND3qsCrQXOyLe96+uDsKi4GioqcL/gdTixe4l:7D4e4xK96+Yi4eqIa
Malware Config
Signatures
Files
-
2c2cc31b0509156eadc17e4ef92d6a2e0ca1752a5c3762b5c701d28d287abc6b.exe windows x86
1b0b96b71dd8b2f7bd533534b132dd4e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
LoadLibraryA
BuildCommDCBA
HeapAlloc
EnterCriticalSection
GetSystemTimeAsFileTime
InterlockedIncrement
OutputDebugStringW
UnhandledExceptionFilter
lstrcmpiW
CreateMutexW
WideCharToMultiByte
WaitForSingleObject
VirtualFree
GetModuleFileNameW
TerminateProcess
HeapFree
CreateThread
IsDebuggerPresent
SetLastError
SizeofResource
LoadLibraryExW
LeaveCriticalSection
LoadResource
WaitNamedPipeW
SetEvent
FlushInstructionCache
WaitForMultipleObjects
MultiByteToWideChar
CreateEventW
VirtualAlloc
FreeLibrary
GetCurrentProcess
InterlockedCompareExchange
TerminateThread
DeleteCriticalSection
Sleep
lstrlenW
FormatMessageW
LocalFree
GetCurrentThreadId
GetCurrentProcessId
FindResourceW
QueryPerformanceCounter
SetUnhandledExceptionFilter
CloseHandle
InterlockedExchange
ResetEvent
GetModuleHandleW
GetPriorityClass
InitializeCriticalSection
GetVersionExW
InterlockedDecrement
IsProcessorFeaturePresent
RaiseException
GetStartupInfoW
LoadLibraryW
ExitProcess
GetVersion
VirtualProtect
LoadLibraryExA
GetProcAddress
GetLastError
GetTickCount
ReleaseMutex
lstrlenA
user32
GetMessageW
AppendMenuW
CallWindowProcW
SetMenuItemInfoW
GetSysColorBrush
SetMenuDefaultItem
LoadImageW
DestroyMenu
RegisterWindowMessageW
GetMenuItemCount
SetTimer
PostMessageW
FillRect
TrackPopupMenu
GetClassInfoExW
KillTimer
CreateWindowExW
PostQuitMessage
DestroyIcon
GetSysColor
GetSubMenu
DefWindowProcW
LoadMenuW
LoadStringW
DispatchMessageW
SystemParametersInfoW
DrawIconEx
IsWindow
DrawTextW
GetMenuItemInfoW
ReleaseDC
SetForegroundWindow
FindWindowW
LoadCursorW
GetDoubleClickTime
IsMenu
GetDC
SetWindowLongW
CreatePopupMenu
TranslateMessage
RegisterClassExW
UnregisterClassA
GetSystemMetrics
DestroyWindow
DeleteMenu
CharNextW
GetCursorPos
GetWindowLongW
gdi32
SetTextColor
DeleteObject
SelectObject
CreateFontIndirectW
SetBkColor
advapi32
RegQueryValueExW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
GetUserNameA
RegEnumValueW
RegOpenKeyExW
RegSetValueExW
RegNotifyChangeKeyValue
RegQueryInfoKeyW
ole32
CoTaskMemRealloc
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
oleaut32
VarUI4FromStr
wldap32
ord197
Sections
.text Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.shit Size: - Virtual size: 9KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ