Static task
static1
Behavioral task
behavioral1
Sample
00ce14c3c67c2f85e1120dd9f5abf50a0d41e72aa31f616fe3c9d1cd8666545a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
00ce14c3c67c2f85e1120dd9f5abf50a0d41e72aa31f616fe3c9d1cd8666545a.exe
Resource
win10v2004-20220901-en
General
-
Target
00ce14c3c67c2f85e1120dd9f5abf50a0d41e72aa31f616fe3c9d1cd8666545a
-
Size
491KB
-
MD5
9328bb0c9aed5f33e2cac361d29e38b9
-
SHA1
425da152897083b83344c1a58d2edc8b5f22e7e0
-
SHA256
00ce14c3c67c2f85e1120dd9f5abf50a0d41e72aa31f616fe3c9d1cd8666545a
-
SHA512
310718beccf05a54f5b38686ddd7b7cbd8d2698702ab80e5284698b6d5d6994f55f8431f1a6af5ec8aea5aa9d27ebc52b4378c43c4c199f298a10f34d449ff2d
-
SSDEEP
12288:ejmxHgIlKAGD1++2gIbSmsIyV9i5yKSQcZ+L/hYxq:KmhgEQJ++WGVIi9i5hSNZ+DWq
Malware Config
Signatures
Files
-
00ce14c3c67c2f85e1120dd9f5abf50a0d41e72aa31f616fe3c9d1cd8666545a.exe windows x86
b9170df06d3236daa70cf4ac3f8d69a9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
kernel32
HeapSetInformation
VerifyVersionInfoA
VerSetConditionMask
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
CreateProcessA
GetPrivateProfileStringA
SetCurrentDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
RtlUnwind
OutputDebugStringA
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
user32
MessageBoxA
shlwapi
PathFileExistsA
Sections
.text Size: 466KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.abss Size: - Virtual size: 520KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdat Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 236B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ