Static task
static1
Behavioral task
behavioral1
Sample
c0dd4e303f0268db1e8fb83b54dd7ddb7a13195fbd1f2e5319cda854c0db1243.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c0dd4e303f0268db1e8fb83b54dd7ddb7a13195fbd1f2e5319cda854c0db1243.exe
Resource
win10v2004-20220812-en
General
-
Target
c0dd4e303f0268db1e8fb83b54dd7ddb7a13195fbd1f2e5319cda854c0db1243
-
Size
175KB
-
MD5
7236c49055c3dec346697567e90b0e50
-
SHA1
9c2211ecdd8860f85a3148d725c2c74679313ad7
-
SHA256
c0dd4e303f0268db1e8fb83b54dd7ddb7a13195fbd1f2e5319cda854c0db1243
-
SHA512
32b5909e8db0d6aa84b6d6929f4ec6691ef49971729ac1e3de99874dd450a657dee6010dd3d4233e932ff6ab8daaebd01c31dafc269d18ea52fee4694f4d2f28
-
SSDEEP
3072:K4HWIkSofn4N/dHTJG1+qmQu3UmhVRZNclVWdKWlNGow2zxgDz2V:K4FkSyn41dHF1LQu394WdjlNGow21eY
Malware Config
Signatures
Files
-
c0dd4e303f0268db1e8fb83b54dd7ddb7a13195fbd1f2e5319cda854c0db1243.exe windows x86
2f8f7c6232a169945d74dc50243d9bfc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
fopen
fseek
fclose
malloc
free
ftell
fread
fabs
ceil
floor
strlen
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
Sleep
FreeLibrary
HeapAlloc
HeapFree
CloseHandle
GetCurrentThreadId
GetCurrentProcessId
WideCharToMultiByte
LoadLibraryA
GetProcAddress
TlsAlloc
GetVersionExA
WriteFile
SetFilePointer
HeapReAlloc
CreateFileA
ReadFile
user32
MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
GetWindowLongA
GetForegroundWindow
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos
DestroyIcon
FillRect
gdi32
GetObjectType
DeleteObject
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
GetStockObject
comctl32
InitCommonControlsEx
ole32
CoInitialize
Sections
.code Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ