Static task
static1
Behavioral task
behavioral1
Sample
c25cb22bf68e72a1415a8fa073981dd18fd54aeb9b6992f83bc26210a071bb51.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c25cb22bf68e72a1415a8fa073981dd18fd54aeb9b6992f83bc26210a071bb51.exe
Resource
win10v2004-20220901-en
General
-
Target
c25cb22bf68e72a1415a8fa073981dd18fd54aeb9b6992f83bc26210a071bb51
-
Size
306KB
-
MD5
90cfe7b98dfcd6369f77435bdfe6ede0
-
SHA1
3fde4aba8a394041af35c8ee9d59911af5f403f1
-
SHA256
c25cb22bf68e72a1415a8fa073981dd18fd54aeb9b6992f83bc26210a071bb51
-
SHA512
48592dba82fa5f64dbeb941eeaaa95c9734b61e23bb45d747033cc19416a5df0735e1fc911d19b4d33c9f07b19a026fb35f0c2a28101140e11cdaff01c751e28
-
SSDEEP
6144:spVWnFGhDOPUdqPC9SLA4fCatumH13w2o8RlVyEfS7yCcIv:sSMCc0Lcatl3wCvfOL
Malware Config
Signatures
Files
-
c25cb22bf68e72a1415a8fa073981dd18fd54aeb9b6992f83bc26210a071bb51.exe windows x86
d3d7533c08ce116ec0da6054177cee44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetExitCodeThread
GetStringTypeA
TlsGetValue
GetModuleHandleA
HeapFree
SetLastError
SetPriorityClass
GetTickCount
SuspendThread
FindResourceW
CreateDirectoryW
GetFileAttributesA
LocalLock
GetLocaleInfoW
GetCurrentProcess
FindClose
RemoveDirectoryW
MapViewOfFile
GetFileAttributesA
IsValidCodePage
VirtualProtect
user32
PostMessageW
LoadImageW
wsprintfW
GetWindowLongW
PeekMessageW
DispatchMessageA
LoadStringW
SetCursor
IsDialogMessageA
IsWindow
SetFocus
LoadCursorA
GetWindowTextW
msctf
DllCanUnloadNow
DllUnregisterServer
TF_InitSystem
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE