Static task
static1
Behavioral task
behavioral1
Sample
c70e314a85c183b41b319577e1ebad64353b883018cac97de2188520dbcd778e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c70e314a85c183b41b319577e1ebad64353b883018cac97de2188520dbcd778e.exe
Resource
win10v2004-20220812-en
General
-
Target
c70e314a85c183b41b319577e1ebad64353b883018cac97de2188520dbcd778e
-
Size
424KB
-
MD5
7db02f9228554043de47b354221c8bca
-
SHA1
bbe4cd030c70151abd8dbf9e68caedc05e61dbde
-
SHA256
c70e314a85c183b41b319577e1ebad64353b883018cac97de2188520dbcd778e
-
SHA512
ba67aefe72db0025fea7222e6357e4d506bdc0054bcd59d7d5d41d147da063c1f89d29149f340d4896258851289da797a0957e8340d3e9bb58c7189d362b7ed9
-
SSDEEP
6144:lg696TSBF7DRiH9Pyn65fNkKJXXj8p8HmHorKspEJihalpr70PoXbftChXW3Axfg:t96kNqmMNTFQaEorEJ4E5blCJxfS6
Malware Config
Signatures
Files
-
c70e314a85c183b41b319577e1ebad64353b883018cac97de2188520dbcd778e.exe windows x86
1c913f8daa85e3a23c7059616db8ce78
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ole32
HMENU_UserUnmarshal
comdlg32
ChooseColorA
PageSetupDlgW
imm32
ImmDestroyContext
clusapi
OpenCluster
setupapi
SetupBackupErrorA
pdh
PdhGetCounterInfoW
user32
wsprintfW
urlmon
CoInternetCombineUrl
msvcrt
memcpy
isalnum
wcstoul
kernel32
GetModuleFileNameA
CreateThread
SetFilePointerEx
GlobalMemoryStatusEx
DeleteTimerQueue
GetFirmwareEnvironmentVariableA
SetFirmwareEnvironmentVariableA
GetTapeStatus
HeapWalk
ntdsapi
DsFreeSpnArrayA
oleaut32
VarCyFromI1
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ordo Size: 4KB - Virtual size: 851B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.t Size: 4KB - Virtual size: 46B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mrt1 Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ