Static task
static1
Behavioral task
behavioral1
Sample
c56ba1d79c8f2d8637a21614d2dea471c49980c508f91e24727af72d1c53c4c6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c56ba1d79c8f2d8637a21614d2dea471c49980c508f91e24727af72d1c53c4c6.exe
Resource
win10v2004-20220901-en
General
-
Target
c56ba1d79c8f2d8637a21614d2dea471c49980c508f91e24727af72d1c53c4c6
-
Size
767KB
-
MD5
20cd555e7ad8a907804bf501651b4677
-
SHA1
19c33402ae125ed0ccea51eb2672064855625baf
-
SHA256
c56ba1d79c8f2d8637a21614d2dea471c49980c508f91e24727af72d1c53c4c6
-
SHA512
770303258a2f26a5fc133f05524c8ee15e39166784a8a6540a4aa0601797d24e93f535ce749cc06d0c91370c715f559b5012bac49dce66ddb2ee98e4175e6640
-
SSDEEP
12288:B/q/J+7P5ztcaHQfeA+3PCYddxWguAJZorfNyX5gmmQc93Y8PF/W3KYU23:B687cWbxddxruGihyzmL9oo/WaYU23
Malware Config
Signatures
Files
-
c56ba1d79c8f2d8637a21614d2dea471c49980c508f91e24727af72d1c53c4c6.exe windows x86
26e598d352d73d03a5d8b9b9ba9849c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ReleaseSemaphore
GetStartupInfoA
SetLastError
Sleep
GetCommandLineW
GetFileSize
VirtualProtectEx
CreateMutexA
HeapDestroy
lstrlenA
CreatePipe
LoadLibraryA
HeapSize
GetVersion
SetLastError
GetStdHandle
WriteConsoleW
OpenEventW
CreateFileA
ReleaseMutex
RemoveDirectoryW
CreateFileMappingW
RemoveDirectoryW
CreateDirectoryW
user32
FindWindowA
DrawTextW
GetClassInfoA
PeekMessageA
DestroyMenu
IsWindow
GetSysColor
IsZoomed
MessageBoxA
DispatchMessageA
CreateIcon
DestroyMenu
GetWindowLongA
feclient
FeClientInitialize
FeClientInitialize
FeClientInitialize
FeClientInitialize
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE