Static task
static1
Behavioral task
behavioral1
Sample
c1cd712fe93aa6086cdd66f5a3f50be8563d44f46e5af33c870a4ddd1a49c0ad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c1cd712fe93aa6086cdd66f5a3f50be8563d44f46e5af33c870a4ddd1a49c0ad.exe
Resource
win10v2004-20220812-en
General
-
Target
c1cd712fe93aa6086cdd66f5a3f50be8563d44f46e5af33c870a4ddd1a49c0ad
-
Size
232KB
-
MD5
96eeaa569b1e92c8afaee579961b8180
-
SHA1
d088a2c307f57b6cdc6cac1f3fb03aa6c4c73f21
-
SHA256
c1cd712fe93aa6086cdd66f5a3f50be8563d44f46e5af33c870a4ddd1a49c0ad
-
SHA512
08de65e2a69556697073121e7355a007ef848468d2cf8fbc28fa23c248e2a25fcef08607d3c1c63d12ec4ab87a85fe1eb45e7faaa443f8991b81a5e741e48fd3
-
SSDEEP
6144:E3U2mHPhMtXf/Ru1zcxChO82YJWvN7aVIUy:R/PhqfY2YwB8IUy
Malware Config
Signatures
Files
-
c1cd712fe93aa6086cdd66f5a3f50be8563d44f46e5af33c870a4ddd1a49c0ad.exe windows x86
b5558fce337c1e97773643800b7ef9dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
EnterCriticalSection
lstrcpyA
LocalFree
FormatMessageA
DeleteFileA
WriteFile
Sleep
InterlockedDecrement
QueryPerformanceFrequency
GetPrivateProfileStringA
FreeLibrary
GetProcAddress
LoadLibraryA
CreateFileA
ReadFile
CopyFileA
GetTempFileNameA
GetTempPathA
SetFilePointer
GetFileSize
GetDiskFreeSpaceA
GetModuleHandleA
lstrcatA
SetLastError
CompareStringA
CompareStringW
GetVersionExA
LoadResource
FindResourceExA
CreateProcessA
FlushInstructionCache
GetCurrentProcess
GetShortPathNameA
GetModuleFileNameA
SizeofResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
SetUnhandledExceptionFilter
GetCommandLineA
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
SetEndOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
TerminateProcess
IsBadWritePtr
InterlockedIncrement
lstrlenW
WideCharToMultiByte
GetTickCount
GetCurrentThreadId
lstrlenA
MultiByteToWideChar
ResetEvent
GetLastError
SetEvent
WaitForSingleObject
CreateEventA
CreateThread
VirtualAlloc
VirtualFree
HeapCreate
GetEnvironmentVariableA
ExitProcess
GetVersion
GetStartupInfoA
HeapAlloc
HeapReAlloc
HeapFree
RaiseException
RtlUnwind
SystemTimeToFileTime
QueryPerformanceCounter
GetWindowsDirectoryA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SearchPathA
FindFirstFileA
VirtualProtect
VirtualQuery
FindClose
CloseHandle
user32
CreateWindowExA
RegisterClassExA
LoadCursorA
CharLowerBuffA
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageA
PostMessageA
IsWindow
MessageBoxA
LoadStringA
wsprintfA
GetClassInfoExA
GetDesktopWindow
DefWindowProcA
SendMessageA
GetMessageA
PostThreadMessageA
CharNextA
SetWindowLongA
CallWindowProcA
GetWindowLongA
DestroyWindow
advapi32
RegDeleteKeyA
RegEnumKeyA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ole32
CoInitialize
CoUninitialize
ProgIDFromCLSID
StringFromGUID2
CoCreateGuid
CLSIDFromProgID
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemFree
oleaut32
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SysAllocStringLen
VarUI4FromStr
DispCallFunc
GetErrorInfo
CreateErrorInfo
SetErrorInfo
LoadRegTypeLi
SysStringLen
VariantClear
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 136KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE