Static task
static1
Behavioral task
behavioral1
Sample
c7cd3ed39e39573a49e0cb11e625b5fcb4254e4b7c8d77f54801b00b20401ddc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c7cd3ed39e39573a49e0cb11e625b5fcb4254e4b7c8d77f54801b00b20401ddc.exe
Resource
win10v2004-20220812-en
General
-
Target
c7cd3ed39e39573a49e0cb11e625b5fcb4254e4b7c8d77f54801b00b20401ddc
-
Size
272KB
-
MD5
4c633ede5c19d03db91b40c3a76069b5
-
SHA1
7004560bb31aaa2cebc7160d7fb0f5dc86fd1173
-
SHA256
c7cd3ed39e39573a49e0cb11e625b5fcb4254e4b7c8d77f54801b00b20401ddc
-
SHA512
7533432a9f8e96be7fdcca0f676b65a90d325b63845bab2d6df9e2c9991331bd4aef0bef49faa2c95a8282b8124e95e3a87fec7a3494f9fd7450f05cf8a549f2
-
SSDEEP
6144:r3uPDMy6OEJm/UEIrQ4ctDJYdrchc2cccccpccccccccccocccccccccccTccccf:r3CFKmMPyurchc2cccccpccccccccccw
Malware Config
Signatures
Files
-
c7cd3ed39e39573a49e0cb11e625b5fcb4254e4b7c8d77f54801b00b20401ddc.exe windows x86
ca438692d0e0369658db9d48250a63d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA
GetStartupInfoA
CreateProcessA
WaitForSingleObject
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
SetFilePointer
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
RaiseException
LCMapStringW
CloseHandle
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetLastError
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedIncrement
InterlockedDecrement
GetVersion
GetCommandLineA
IsBadReadPtr
HeapReAlloc
ExitProcess
WriteProcessMemory
LocalSize
HeapAlloc
HeapFree
GetProcessHeap
SetWaitableTimer
CreateWaitableTimerA
WideCharToMultiByte
ReadProcessMemory
VirtualQueryEx
OpenProcess
MultiByteToWideChar
MulDiv
GlobalUnlock
RtlMoveMemory
GlobalFree
GlobalLock
GlobalAlloc
GetModuleHandleA
atl
ord42
ord47
ole32
CreateStreamOnHGlobal
CLSIDFromString
oleaut32
OleLoadPicture
user32
SetMenuInfo
GetSubMenu
GetMenuItemID
CheckMenuRadioItem
SetForegroundWindow
TrackPopupMenu
GetMenuStringA
GetMenuItemInfoA
GetMenuItemRect
GetMenuState
GetMenuInfo
GetMenuDefaultItem
MenuItemFromPoint
RemoveMenu
CheckMenuItem
SetMenuItemInfoA
SetMenuItemBitmaps
SetMenuDefaultItem
wsprintfA
PeekMessageA
DrawTextA
KillTimer
SetTimer
RegisterClassExA
SetActiveWindow
UnregisterHotKey
RegisterHotKey
RegisterWindowMessageA
DrawMenuBar
SetMenu
GetMenu
GetSystemMetrics
IsZoomed
IsIconic
GetSysColor
FillRect
SetClassLongA
GetClassLongA
SetRect
SetWindowRgn
RemovePropA
GetPropA
SetPropA
InsertMenuA
GetMenuItemCount
AppendMenuA
DestroyMenu
LoadMenuA
MessageBoxA
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
EnableWindow
IsWindowEnabled
ShowWindow
IsWindowVisible
SetParent
PostMessageA
MoveWindow
UpdateWindow
ValidateRect
InvalidateRect
ScreenToClient
GetFocus
SetFocus
GetDlgItem
GetWindowLongA
CreateWindowExA
DestroyCursor
SetWindowLongA
PostQuitMessage
DestroyIcon
TrackMouseEvent
SetCursor
LoadCursorA
DefMDIChildProcA
SendMessageA
DefWindowProcA
DestroyWindow
GetClientRect
GetAsyncKeyState
CallWindowProcA
EndPaint
BeginPaint
MsgWaitForMultipleObjects
SetWindowPos
CloseWindow
GetWindowThreadProcessId
GetWindowRect
GetClassNameA
IsWindow
DispatchMessageA
TranslateMessage
IsDialogMessageA
TranslateAcceleratorA
GetParent
GetMessageA
ReleaseDC
GetDC
CopyIcon
CopyImage
GetSystemMenu
CreatePopupMenu
CreateMenu
gdi32
GetObjectA
CreateCompatibleDC
CreateDIBSection
DeleteDC
SelectObject
BitBlt
ExtCreateRegion
CombineRgn
CreateRoundRectRgn
GetStockObject
CreateSolidBrush
CreatePatternBrush
SetTextColor
SetBkMode
SetBkColor
CreateCompatibleBitmap
FillRgn
FrameRgn
CreateFontA
DeleteObject
StretchBlt
GetDeviceCaps
shell32
DragAcceptFiles
Shell_NotifyIconA
DragFinish
DragQueryFileA
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ