Static task
static1
Behavioral task
behavioral1
Sample
c5f1508ed62797d9c30d4b5bde45ee4ae5eabe9411c35b2e69edb66ed29c3209.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c5f1508ed62797d9c30d4b5bde45ee4ae5eabe9411c35b2e69edb66ed29c3209.exe
Resource
win10v2004-20220901-en
General
-
Target
c5f1508ed62797d9c30d4b5bde45ee4ae5eabe9411c35b2e69edb66ed29c3209
-
Size
329KB
-
MD5
932979ed93d239b6a099bc1fd4f750e0
-
SHA1
44eb67a1929879b2f92defb826e28defdbf20779
-
SHA256
c5f1508ed62797d9c30d4b5bde45ee4ae5eabe9411c35b2e69edb66ed29c3209
-
SHA512
4090832c5fc9fe95afcad976ff5739098d437cceda8b7b4b925e79d3b55731659a5369c548c3ffeb96c1bbc4ed474f7c2ed2faeb6206b8e632705a9d184aca62
-
SSDEEP
6144:gexczt9LizbXk1YkthZuuvWouP+jtvUounBwLk6LsWi:gEeObXkOuvjA+jtvUogw0H
Malware Config
Signatures
Files
-
c5f1508ed62797d9c30d4b5bde45ee4ae5eabe9411c35b2e69edb66ed29c3209.exe windows x86
332658367cf82bcfb45df268c19c461a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetSystemDirectoryW
SetFilePointer
ReadFile
WriteFile
FindResourceA
CreateFileA
DeleteFileW
CopyFileW
GetProcAddress
GetModuleHandleW
lstrlenW
LoadLibraryW
TerminateProcess
GetCurrentProcess
GetPrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileSectionW
GetFileSize
GetTickCount
Sleep
GetProcessId
LoadLibraryExW
OpenProcess
GetLastError
GetProfileIntW
CreateMutexW
GetModuleFileNameW
WriteProfileStringW
SetFileAttributesA
LoadLibraryA
WideCharToMultiByte
WaitForSingleObject
CreateThread
CreateToolhelp32Snapshot
Process32FirstW
FindFirstFileW
FindNextFileW
FindClose
Process32NextW
GetModuleHandleA
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
CreateProcessW
MultiByteToWideChar
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
WritePrivateProfileStringW
CloseHandle
GetPrivateProfileIntA
GetPrivateProfileStringA
DeviceIoControl
CreateFileW
SetFileAttributesW
OutputDebugStringW
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStartupInfoW
SetUnhandledExceptionFilter
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
LCMapStringW
LCMapStringA
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
user32
FindWindowW
FindWindowExA
GetWindowThreadProcessId
EnumWindows
PostMessageW
GetWindowRect
wsprintfW
GetSystemMetrics
advapi32
RegEnumKeyExW
RegDeleteKeyW
RegCloseKey
RegSetValueW
RegQueryValueW
RegOpenKeyExW
RegSetValueExW
shlwapi
StrStrIW
PathFileExistsW
ws2_32
inet_addr
htonl
psapi
GetModuleInformation
GetModuleFileNameExW
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ