Static task
static1
Behavioral task
behavioral1
Sample
10cb40dc31814fdbdaeec08cf039b543ec89b51d59f22e204db29f2fe8122b23.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
10cb40dc31814fdbdaeec08cf039b543ec89b51d59f22e204db29f2fe8122b23.exe
Resource
win10v2004-20220812-en
General
-
Target
10cb40dc31814fdbdaeec08cf039b543ec89b51d59f22e204db29f2fe8122b23
-
Size
290KB
-
MD5
45a7511eeed6fe2a24f1f1f66001a7b5
-
SHA1
d11c12ed88d76db49eccdb5f2524ec1781808cce
-
SHA256
10cb40dc31814fdbdaeec08cf039b543ec89b51d59f22e204db29f2fe8122b23
-
SHA512
c6fe0544239a2a844417da58acd426952082d30d205b0472068ff41f4802333ebc3a04481c54fe3c7811620a56bc0908c0ce5bc83948d3762459a120629906b8
-
SSDEEP
6144:qrDmz9UyxEpnPIed+OWHZhCt6RITmdVbm0uQicVjZZ/5WLJIM1qKtA:Nz9UVIed+fnC1TmdVbluIjZZ/52W
Malware Config
Signatures
Files
-
10cb40dc31814fdbdaeec08cf039b543ec89b51d59f22e204db29f2fe8122b23.exe windows x86
41f60b5556d77c1a7709ba788e6181c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
FlushInstructionCache
SetCalendarInfoW
SetCurrentDirectoryA
OutputDebugStringA
VirtualAlloc
ReleaseMutex
DisconnectNamedPipe
GetPrivateProfileStructW
GetCalendarInfoA
OpenFile
GetTimeZoneInformation
GetEnvironmentVariableW
WritePrivateProfileStringW
_lopen
WaitForMultipleObjectsEx
WinExec
FileTimeToLocalFileTime
GetTempPathA
TransmitCommChar
FreeEnvironmentStringsW
SetMailslotInfo
SetThreadContext
CreateThread
lstrcmpA
SetConsoleTitleA
GetFileSize
QueryPerformanceFrequency
GetBinaryTypeA
ScrollConsoleScreenBufferA
EnumTimeFormatsW
TerminateProcess
WriteConsoleOutputW
GetSystemDefaultLCID
SetConsoleTitleW
GetFileType
CloseHandle
SetProcessAffinityMask
UnhandledExceptionFilter
SetCommMask
TerminateThread
GlobalUnlock
LocalShrink
PurgeComm
GetPrivateProfileStringA
Beep
GetPrivateProfileStringW
GlobalAddAtomA
GetModuleHandleA
GetStartupInfoA
user32
IsCharAlphaA
DefDlgProcW
SendDlgItemMessageA
IsDialogMessageA
ReleaseDC
ActivateKeyboardLayout
GetTabbedTextExtentW
TrackPopupMenu
MapVirtualKeyW
SetTimer
LoadMenuA
MessageBoxIndirectW
AppendMenuA
MapVirtualKeyExW
GetWindowRect
DlgDirSelectExA
GetCaretPos
IsWindowUnicode
CreateCursor
SwitchToThisWindow
PaintDesktop
CheckMenuItem
wsprintfA
GetDCEx
SetCaretBlinkTime
LoadIconW
GetDesktopWindow
GetCaretBlinkTime
GetScrollRange
GetClipboardFormatNameW
GetOpenClipboardWindow
LoadImageW
GetMessagePos
AppendMenuW
SendMessageTimeoutW
MapWindowPoints
SetKeyboardState
TabbedTextOutW
EndPaint
gdi32
GetROP2
TextOutW
Pie
CreateFontIndirectW
GetTextCharset
CreateBitmapIndirect
RectVisible
GetCurrentObject
CombineTransform
GdiSetBatchLimit
BitBlt
RemoveFontResourceA
EndDoc
GetCharWidthFloatW
CreateEllipticRgn
PlayEnhMetaFileRecord
SelectObject
SetPolyFillMode
PtInRegion
PolyTextOutA
CreateDiscardableBitmap
CreateDCW
CreatePatternBrush
GetEnhMetaFileDescriptionW
ScaleWindowExtEx
GetObjectType
ChoosePixelFormat
GetCharABCWidthsW
GetCharWidthA
BeginPath
SetWindowOrgEx
GetCharacterPlacementA
GetTextMetricsA
SetBoundsRect
FrameRgn
GetKerningPairsA
EnumMetaFile
comdlg32
ChooseColorA
PageSetupDlgA
advapi32
RegLoadKeyW
BuildTrusteeWithSidW
AdjustTokenPrivileges
GetExplicitEntriesFromAclW
AbortSystemShutdownA
CreatePrivateObjectSecurity
SetThreadToken
RegisterServiceCtrlHandlerA
AllocateLocallyUniqueId
AreAllAccessesGranted
OpenSCManagerW
InitiateSystemShutdownA
ChangeServiceConfigW
CryptDeriveKey
RegSetValueA
SetServiceStatus
GetTrusteeNameA
IsValidSecurityDescriptor
CryptGetProvParam
GetNamedSecurityInfoW
UnlockServiceDatabase
RegOpenKeyExW
DestroyPrivateObjectSecurity
GetTrusteeTypeA
LookupPrivilegeNameW
EnumDependentServicesW
shell32
SHGetPathFromIDListW
SHGetInstanceExplorer
SHEmptyRecycleBinA
SHGetPathFromIDListA
Shell_NotifyIconW
SHChangeNotify
SHGetDesktopFolder
msvcrt
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strlen
_controlfp
Sections
.text Size: 273KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE