Static task
static1
Behavioral task
behavioral1
Sample
0cad2382600ae9db4fa729d3b35a70e5d136aa160cd5ffb213d6afca06171d34.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0cad2382600ae9db4fa729d3b35a70e5d136aa160cd5ffb213d6afca06171d34.exe
Resource
win10v2004-20220901-en
General
-
Target
0cad2382600ae9db4fa729d3b35a70e5d136aa160cd5ffb213d6afca06171d34
-
Size
750KB
-
MD5
81070d64220b270178a5790ee7c91c60
-
SHA1
72e63c85d37a53262bad5ff68421d215b26687de
-
SHA256
0cad2382600ae9db4fa729d3b35a70e5d136aa160cd5ffb213d6afca06171d34
-
SHA512
e3dcc664b0839b02a5c911ef7208f97123d6e1e6020c1a1cfa88bd2f7ac9e83f8a6d54e353d412444bcad9d96bb871133280de753a8c687a1a18e9ca5d869b1f
-
SSDEEP
12288:X0ET3f76JlqUvpPGf2diDy5H/f6iWOSVTbjLroPvSmkO2ki4pQA8:XdMlqcPmDa/fnSVvroDk0
Malware Config
Signatures
Files
-
0cad2382600ae9db4fa729d3b35a70e5d136aa160cd5ffb213d6afca06171d34.exe windows x86
1eb800cc06590bec5ccb7d7f5cc49f5c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForDebugEvent
GetThreadLocale
lstrlenA
GetCPInfoExW
OpenFile
GetSystemDefaultLangID
CreateDirectoryA
CreatePipe
EnumUILanguagesW
WaitCommEvent
RequestDeviceWakeup
GetLongPathNameW
GetShortPathNameW
LCMapStringW
InterlockedExchange
GetTempFileNameA
ExitProcess
MapViewOfFile
CreateIoCompletionPort
GlobalFindAtomW
GetCommModemStatus
LCMapStringA
GetLogicalDrives
GetCPInfoExA
CreateDirectoryW
GetCommandLineW
OpenFileMappingA
TransactNamedPipe
GetEnvironmentVariableA
IsDebuggerPresent
GetSystemTime
BackupRead
TlsFree
GetFileAttributesW
CreateHardLinkA
GetVolumeNameForVolumeMountPointW
MoveFileExW
GetStringTypeW
EnumSystemLanguageGroupsA
GetCommandLineA
GetOEMCP
Process32NextW
QueryPerformanceCounter
RtlUnwind
LocalSize
GetUserDefaultLCID
FileTimeToDosDateTime
GetAtomNameW
GetPrivateProfileSectionNamesW
OpenSemaphoreA
SetCurrentDirectoryA
FlushFileBuffers
FreeEnvironmentStringsA
FindNextChangeNotification
EnumResourceNamesA
CommConfigDialogA
SetHandleCount
DeleteTimerQueueEx
SetVolumeLabelA
GetFullPathNameA
AssignProcessToJobObject
IsSystemResumeAutomatic
LoadResource
OpenFileMappingW
CreateJobObjectW
LocalUnlock
GetLocalTime
WriteFileGather
EndUpdateResourceA
IsProcessorFeaturePresent
GetProfileStringW
GetDiskFreeSpaceA
GetTickCount
GetPrivateProfileSectionNamesA
FindResourceExW
GetTimeFormatW
GetModuleHandleW
SetTapePosition
DuplicateHandle
IsValidLanguageGroup
GetCurrentDirectoryW
CreateDirectoryExA
EnumLanguageGroupLocalesW
FindNextVolumeA
SetMessageWaitingIndicator
FindResourceW
SwitchToThread
SetProcessShutdownParameters
CreateSemaphoreA
_lcreat
OpenWaitableTimerA
_lread
user32
InvertRect
LoadIconW
FindWindowA
OffsetRect
EndPaint
GetSystemMetrics
GetMessageW
BeginPaint
FrameRect
GetDlgItem
SendMessageW
DrawTextW
IsDlgButtonChecked
InvalidateRect
CreateWindowExW
FillRect
GetDlgItemTextW
WinHelpW
EndDialog
wsprintfW
GetSubMenu
IsIconic
DispatchMessageW
GetDesktopWindow
SetDlgItemTextW
IsZoomed
CheckRadioButton
SetRect
LoadStringA
GetForegroundWindow
GetWindowRect
IntersectRect
DefWindowProcW
GetWindowPlacement
LoadBitmapW
ReleaseDC
GetDC
RegisterClassW
MessageBoxW
DestroyWindow
MoveWindow
PtInRect
UnionRect
PeekMessageW
MessageBoxA
WaitMessage
LoadCursorW
CheckDlgButton
UpdateWindow
ShowWindow
EnableMenuItem
ReleaseCapture
GetClientRect
LoadAcceleratorsW
DrawMenuBar
DialogBoxParamW
PostMessageW
TranslateAcceleratorW
GetMenu
SetCapture
shlwapi
PathAppendA
PathCanonicalizeA
comctl32
InitCommonControlsEx
advapi32
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExA
RegSetValueExW
RegQueryValueExA
Sections
.text Size: 234KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 324KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ