Static task
static1
Behavioral task
behavioral1
Sample
c499e9f1e034e308f27db1d517f556df011838e31d01ba31800bc4d98346b933.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c499e9f1e034e308f27db1d517f556df011838e31d01ba31800bc4d98346b933.exe
Resource
win10v2004-20220812-en
General
-
Target
c499e9f1e034e308f27db1d517f556df011838e31d01ba31800bc4d98346b933
-
Size
447KB
-
MD5
9f10221a20f80506d18ad5f9cf9ca382
-
SHA1
5c372770539c7c647b7ee47f86a4f65cc7f5f8fd
-
SHA256
c499e9f1e034e308f27db1d517f556df011838e31d01ba31800bc4d98346b933
-
SHA512
62f331824562cf2b138ceab8a0cda85dd0d90954527b256927e53b7df4cdb0ed8ace8f4b08b853ca5bfbc990d4e1f7c5bef8f4d52f89aab258ae6362b39be76f
-
SSDEEP
12288:3x065y+3ggzDFOmRDXVQsTTp7UjR5ZWfRJmnUQ:h06n7DhDjZu5ZWfTmUQ
Malware Config
Signatures
Files
-
c499e9f1e034e308f27db1d517f556df011838e31d01ba31800bc4d98346b933.exe windows x86
4e5a58e2c0f018c21341d9efbd39c2ee
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptGetHashParam
kernel32
EnterCriticalSection
shlwapi
PathCombineW
PathMatchSpecW
PathRemoveFileSpecW
SHDeleteKeyA
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfA
user32
CharLowerBuffA
ExitWindowsEx
GetClassNameA
GetCursorPos
GetForegroundWindow
GetIconInfo
GetKeyboardState
GetMessageA
PeekMessageA
SendMessageA
ToUnicode
Sections
.lozcz Size: 39KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qbcd Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lcl Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ