Static task
static1
Behavioral task
behavioral1
Sample
2cc75092b5c833a2706aa0b7554d6e4725502d1b8451f05226018ef6a186fafb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2cc75092b5c833a2706aa0b7554d6e4725502d1b8451f05226018ef6a186fafb.exe
Resource
win10v2004-20220812-en
General
-
Target
2cc75092b5c833a2706aa0b7554d6e4725502d1b8451f05226018ef6a186fafb
-
Size
100KB
-
MD5
0c1023beec7d766d845168b0a9dc90a9
-
SHA1
1394249f05ebeeb1fed96dbc5c43ac0865bfd365
-
SHA256
2cc75092b5c833a2706aa0b7554d6e4725502d1b8451f05226018ef6a186fafb
-
SHA512
340db1bc9a16080bdef48627cc4ed041b878173d6fc820de0f2399285d0ad0259b91e99356f6a79ba4480b1b78b088852e7837e6a52bdf127b59aa1631fe0f72
-
SSDEEP
1536:6HhX1l0A/YSz+F4FaynKn2mCeU+ryEokcD8089jaWgz0:6HhgU5FJOdOEovYa/z
Malware Config
Signatures
Files
-
2cc75092b5c833a2706aa0b7554d6e4725502d1b8451f05226018ef6a186fafb.exe windows x86
5faafc4260f1be07c214047b56199a90
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
CloseHandle
GetLastError
CreateFileMappingA
OpenFileMappingA
InterlockedIncrement
lstrlenA
DeleteFileA
GetFileAttributesExA
MultiByteToWideChar
GetModuleFileNameA
GetTempPathA
SetFileAttributesA
WaitForSingleObject
CreateProcessA
ReadFile
SetEndOfFile
UnmapViewOfFile
InterlockedDecrement
GetTempFileNameA
Sleep
LoadLibraryA
CreateFileA
FlushFileBuffers
SetStdHandle
SetFilePointer
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
WideCharToMultiByte
LocalFree
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
HeapSize
SetUnhandledExceptionFilter
GetProcAddress
GetACP
GetOEMCP
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
user32
DispatchMessageA
PeekMessageA
TranslateMessage
CreateWindowExA
advapi32
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteValueA
ole32
CoInitialize
OleRun
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoUninitialize
oleaut32
GetErrorInfo
SysFreeString
SysAllocStringByteLen
SysStringLen
VariantChangeType
SysAllocString
SysStringByteLen
VariantClear
VariantInit
wininet
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetQueryDataAvailable
InternetCloseHandle
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.share Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE