Static task
static1
Behavioral task
behavioral1
Sample
2c9bb169762bd5d20f58bcccc9acbf3f1a9f9644728554b4ff81a315bacfb41c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2c9bb169762bd5d20f58bcccc9acbf3f1a9f9644728554b4ff81a315bacfb41c.exe
Resource
win10v2004-20220901-en
General
-
Target
2c9bb169762bd5d20f58bcccc9acbf3f1a9f9644728554b4ff81a315bacfb41c
-
Size
795KB
-
MD5
962dc31f936c9b2280333e684df2b87f
-
SHA1
239d1982d7cb46603c009879f96283898a859d08
-
SHA256
2c9bb169762bd5d20f58bcccc9acbf3f1a9f9644728554b4ff81a315bacfb41c
-
SHA512
d7513fb4d0baef09f951ceb9e65860adada4802a12273f5ce0f24a0fc4a80e5bcac836aa1671982616ff4db797a45e8fcd31d35221292a59cd4d58eaabc74915
-
SSDEEP
24576:yiuwCCdoMfOgNIJijC26pmHOjZFv7KuhXi1cHdN2xQrm:yi/V2jY36R77lrN2Sm
Malware Config
Signatures
Files
-
2c9bb169762bd5d20f58bcccc9acbf3f1a9f9644728554b4ff81a315bacfb41c.exe windows x86
20cc58bdbcddcdd9335d34820396021c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetWindowLongW
gdi32
SetTextAlign
comdlg32
GetOpenFileNameW
advapi32
RegSetValueExW
shell32
ShellExecuteExW
ole32
CoCreateInstance
oleaut32
SysStringLen
shlwapi
StrRetToBufW
crypt32
CryptHashPublicKeyInfo
comctl32
ImageList_Destroy
cfgmgr32
CM_Enumerate_Classes
setupapi
SetupDiGetClassDevsW
userenv
CreateEnvironmentBlock
ws2_32
setsockopt
wininet
DetectAutoProxyUrl
urlmon
URLDownloadToFileA
version
GetFileVersionInfoW
winmm
timeGetTime
Sections
.text Size: 769KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE