Static task
static1
Behavioral task
behavioral1
Sample
c0d7771ca073a73a069984ced217b3ad9b42929780c3bb6972b482db90c4b453.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c0d7771ca073a73a069984ced217b3ad9b42929780c3bb6972b482db90c4b453.exe
Resource
win10v2004-20220901-en
General
-
Target
c0d7771ca073a73a069984ced217b3ad9b42929780c3bb6972b482db90c4b453
-
Size
46KB
-
MD5
0a85f2c1aa969391cf6a2f1d2b9054c5
-
SHA1
0b61d668ad7d136cdf4e3fa473915ef9f972f129
-
SHA256
c0d7771ca073a73a069984ced217b3ad9b42929780c3bb6972b482db90c4b453
-
SHA512
bf234966215cb56f500488e6ecbdfc1f48101496eccc94d0f29e8bab4479fa0ad1c88cd02b0d08660c3d7e3d508173d646210de476bc889933e362137313cf02
-
SSDEEP
384:iqo1xiD53kXW6KRS9oYQKgltm743wHnewGNnREqFt+hPbbbb0:iFcZ29VQRnm7MwHn6NnREq2Nbbbb0
Malware Config
Signatures
Files
-
c0d7771ca073a73a069984ced217b3ad9b42929780c3bb6972b482db90c4b453.exe windows x86
c95f69ea33142e6aac817e4d2ecc4e9c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
netapi32
DsAddressToSiteNamesA
DsAddressToSiteNamesExA
DsAddressToSiteNamesExW
DsAddressToSiteNamesW
DsDeregisterDnsHostRecordsW
DsEnumerateDomainTrustsA
DsEnumerateDomainTrustsW
DsGetDcCloseW
DsGetDcNameA
oleaut32
OleCreateFontIndirect
OleCreatePictureIndirect
OleCreatePropertyFrame
OleCreatePropertyFrameIndirect
OleIconToCursor
OleLoadPicture
OleLoadPictureEx
OleLoadPictureFile
OleLoadPictureFileEx
ntprint
PSetupFreeDrvField
PSetupFreeMem
regapi
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryA
RegWdQueryW
RegCdCreateW
RegCdDeleteA
RegCdDeleteW
RegCdEnumerateA
RegCdEnumerateW
RegCdQueryA
RegCdQueryW
RegCloseServer
RegUserConfigRename
RegOpenServerA
RegPdEnumerateA
msvcrt
fopen
fread
kernel32
OutputDebugStringW
IsDebuggerPresent
MulDiv
GetTickCount
GetACP
LoadLibraryA
FindVolumeClose
GetCommandLineA
GetWindowsDirectoryA
iashlpr
AllocateAttributes
sti
StiCreateInstance
msdart
??0CCritSec@@QAE@XZ
??0CDoubleList@@QAE@XZ
Sections
.text Size: 7KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ