Static task
static1
Behavioral task
behavioral1
Sample
c07f74d8961b4790fe6f4f372d1f77922304cb4bd7f8ca229de4318193a22921.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c07f74d8961b4790fe6f4f372d1f77922304cb4bd7f8ca229de4318193a22921.exe
Resource
win10v2004-20220901-en
General
-
Target
c07f74d8961b4790fe6f4f372d1f77922304cb4bd7f8ca229de4318193a22921
-
Size
208KB
-
MD5
0e55bdf665926ad7bd84880cca1ee670
-
SHA1
eb17bdf268e4300e510a0bee37b54b592ad7e1fb
-
SHA256
c07f74d8961b4790fe6f4f372d1f77922304cb4bd7f8ca229de4318193a22921
-
SHA512
488b0aee7ab0ee2632a57f81554c26baa891a8147cd10b0327ac3ca6b03ce19608ca5f89d67ed1b60aeaab00b50f6929a933f319e9d05945fed01d0437604797
-
SSDEEP
6144:ZE49Bao8PJEuXi6nR+BgnUGcSy8chVdGBiD:FqRi6RtnUGcB8idH
Malware Config
Signatures
Files
-
c07f74d8961b4790fe6f4f372d1f77922304cb4bd7f8ca229de4318193a22921.exe windows x86
45f19ff987dd4216c359d3cc016ad4da
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
MultiByteToWideChar
FindResourceA
GetOEMCP
SetLastError
QueryPerformanceCounter
CreateFileA
SystemTimeToFileTime
GetTickCount
LoadLibraryW
WideCharToMultiByte
HeapFree
GetLocalTime
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
lstrcpyA
lstrcmpA
CloseHandle
lstrlenA
GetProcessHeap
GetLocaleInfoA
HeapAlloc
scecli
SceBrowseDatabaseTable
SceAddToNameStatusList
SceCloseProfile
SceAddToObjectList
SceAppendSecurityProfileInfo
SceAnalyzeSystem
schannel
InitializeSecurityContextW
QueryContextAttributesW
QueryContextAttributesA
QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
advapi32
RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExW
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.odata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 3KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ