Static task
static1
Behavioral task
behavioral1
Sample
c2dcebada30eb33198042a3c1759e9df85f3102cb811d5a5544ed8ed09829b96.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2dcebada30eb33198042a3c1759e9df85f3102cb811d5a5544ed8ed09829b96.exe
Resource
win10v2004-20220812-en
General
-
Target
c2dcebada30eb33198042a3c1759e9df85f3102cb811d5a5544ed8ed09829b96
-
Size
193KB
-
MD5
93926c5a15a8d94f90b1b0d9486547d0
-
SHA1
c89c1c145accbcec8146fc2c32dc964d59a629e0
-
SHA256
c2dcebada30eb33198042a3c1759e9df85f3102cb811d5a5544ed8ed09829b96
-
SHA512
3ffa040097b3599f5c136c2ae8dd95f635339f8f13ca751d0c6ebaa5bc62c06444c8e1b0e4b4f21a4ce71dd79c977f3550f60c184b1f06872ffefb3cd897c545
-
SSDEEP
6144:Wcb4V4syDyiAEGiS5aL2to11CuWYQQAYYYYFF0:WcbU4JDZAErSYae7d0QAY+FF0
Malware Config
Signatures
Files
-
c2dcebada30eb33198042a3c1759e9df85f3102cb811d5a5544ed8ed09829b96.exe windows x86
cd720042cac5aad7da4174c43f5ca491
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateFiber
LocalAlloc
SetEndOfFile
GetSystemTime
VerLanguageNameW
GetUserDefaultLangID
TerminateProcess
CompareStringW
FileTimeToSystemTime
LockFile
FindResourceExA
GetFileTime
EnumResourceNamesA
GetFileType
FlushFileBuffers
SearchPathW
GetProfileStringW
GetVersionExW
FileTimeToLocalFileTime
FlushFileBuffers
GetFileAttributesA
GetVolumeInformationW
UnlockFile
IsDBCSLeadByte
GetSystemDirectoryW
comdlg32
GetFileTitleA
comctl32
ImageList_Create
ImageList_Add
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Destroy
rpcrt4
RpcStringBindingComposeA
RpcBindingSetAuthInfoA
RpcBindingFromStringBindingA
NdrClientCall
RpcStringFreeA
user32
WinHelpW
GetSysColorBrush
DefWindowProcW
UnhookWindowsHookEx
DestroyIcon
RealGetWindowClass
CallNextHookEx
ToAscii
SetClipboardData
SetWindowPos
RegisterClassW
ChildWindowFromPoint
SetScrollRange
SetWindowsHookExW
ClipCursor
EmptyClipboard
IsClipboardFormatAvailable
DestroyCursor
DrawEdge
GetSysColor
Sections
.text Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ