Static task
static1
Behavioral task
behavioral1
Sample
c56afb201a0b97cf539ad78cb4bf03162d1d9fee200e5961d9092b68704f92d1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c56afb201a0b97cf539ad78cb4bf03162d1d9fee200e5961d9092b68704f92d1.exe
Resource
win10v2004-20220812-en
General
-
Target
c56afb201a0b97cf539ad78cb4bf03162d1d9fee200e5961d9092b68704f92d1
-
Size
320KB
-
MD5
1edd9e242542066d9312a2af5e52b94e
-
SHA1
8eaf8a5f1f984ebd177ea4e60a0ab7e5992cd54d
-
SHA256
c56afb201a0b97cf539ad78cb4bf03162d1d9fee200e5961d9092b68704f92d1
-
SHA512
fc583657289576f934533195fe82066ce87164af6b731f50c000a84418218b4cca42eed1669e79dabc752de520e0ce7193f3d04895be491f939efbbed977bbee
-
SSDEEP
6144:Gczna/cIgE7Z55EMp1dDICXOAB3nSJXySfN:GC5wZ55Eu3ICXtO/V
Malware Config
Signatures
Files
-
c56afb201a0b97cf539ad78cb4bf03162d1d9fee200e5961d9092b68704f92d1.exe windows x86
0d51d43ab6a59599215fd13b63c0f462
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
DeleteDC
CreatePalette
SelectPalette
CreateCompatibleDC
GetObjectA
GetStockObject
RealizePalette
DeleteObject
StretchDIBits
SetPaletteEntries
ResizePalette
GetSystemPaletteEntries
SetSystemPaletteUse
GetDeviceCaps
CreateCompatibleBitmap
BitBlt
CreateSolidBrush
SelectObject
GetLayout
SetBkMode
SetTextColor
CreateDIBitmap
SetLayout
GetPaletteEntries
user32
CreateWindowExA
DispatchMessageA
DestroyWindow
TranslateMessage
RegisterWindowMessageA
GetMessageA
GetSystemMetrics
IsWindowVisible
GetCursorPos
FindWindowA
PeekMessageA
SetForegroundWindow
SetCursorPos
IsIconic
ReleaseCapture
GetMenu
PostQuitMessage
LoadIconA
SetCapture
PostMessageA
LoadBitmapA
EndPaint
UnregisterClassA
GetDesktopWindow
RegisterClassA
GetWindowRect
InvalidateRect
SetMenu
DrawTextA
ReleaseDC
wsprintfA
MessageBeep
GetWindowTextA
DialogBoxIndirectParamA
LoadCursorA
DefWindowProcA
UpdateWindow
MapVirtualKeyA
SetCursor
SendDlgItemMessageA
EnableMenuItem
GetKeyNameTextA
CheckMenuItem
MessageBoxA
DeleteMenu
DrawMenuBar
ShowWindow
EndDialog
GetDlgItemTextA
SetFocus
GetDlgItem
EnableWindow
GetParent
SendMessageA
SetWindowTextA
WinHelpA
DialogBoxParamA
SetWindowPos
FillRect
MoveWindow
SetWindowLongA
ChangeDisplaySettingsA
GetWindowLongA
RedrawWindow
GetDC
BeginPaint
LoadStringA
shell32
ShellAboutA
kernel32
FindResourceA
RtlUnwind
LocalFree
HeapCreate
HeapDestroy
VirtualFree
GetStdHandle
SetHandleCount
GetFileType
GetACP
GetCPInfo
GetOEMCP
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
MultiByteToWideChar
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetStartupInfoA
ExitProcess
WritePrivateProfileStringA
SizeofResource
GetPrivateProfileIntA
LoadLibraryA
GetProcAddress
GetVersion
WriteFile
VirtualAlloc
GetModuleHandleA
GetStringTypeA
GetStringTypeW
RaiseException
LCMapStringW
SetFilePointer
LCMapStringA
FlushFileBuffers
ReadFile
SetStdHandle
SetEndOfFile
CreateFileA
LoadResource
CloseHandle
_lopen
WinExec
LockResource
lstrcpyA
lstrlenA
lstrcatA
lstrcpynA
_lclose
_hread
GlobalFree
GlobalLock
GlobalReAlloc
GlobalUnlock
GlobalHandle
FreeResource
GetCurrentThread
GetLastError
SetThreadPriority
OpenFile
GetModuleFileNameA
LocalAlloc
GlobalAlloc
_lread
_llseek
lstrcmpA
winmm
timeGetTime
waveOutGetDevCapsA
waveOutGetNumDevs
waveOutGetPosition
mciSendCommandA
waveOutClose
waveOutReset
waveOutOpen
sndPlaySoundA
waveOutWrite
waveOutRestart
waveOutPause
mmioAscend
mmioRead
mmioDescend
mmioClose
mmioOpenA
waveOutUnprepareHeader
waveOutPrepareHeader
advapi32
RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegOpenKeyA
RegQueryValueA
Sections
.text Size: 168KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE