Static task
static1
Behavioral task
behavioral1
Sample
c67c08cc1eb0c1d1f0c491dde264696ec4af6e69636d3b4e28b7a493a1494172.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c67c08cc1eb0c1d1f0c491dde264696ec4af6e69636d3b4e28b7a493a1494172.exe
Resource
win10v2004-20220901-en
General
-
Target
c67c08cc1eb0c1d1f0c491dde264696ec4af6e69636d3b4e28b7a493a1494172
-
Size
47KB
-
MD5
0e8cfc5e5f092d8d086dbb36091953a1
-
SHA1
a70cbf41e73dc69183240a7e28314e93ba0a8f8e
-
SHA256
c67c08cc1eb0c1d1f0c491dde264696ec4af6e69636d3b4e28b7a493a1494172
-
SHA512
4a25079d19ca1ac72ae61f8f9ee183d204a8e61e3d15290e7c4757ee4a9ee6a0c3b661b78e75247e8c1b7a48540908c9b14fa878fa25076eed327ca0cfad0891
-
SSDEEP
768:i2cN87wjq5H7FqCLo+nz1C9TK3AWvClcGh761K0hhr5tAA:i2xH7FqWo+nBC9T6qGGh76XRA
Malware Config
Signatures
Files
-
c67c08cc1eb0c1d1f0c491dde264696ec4af6e69636d3b4e28b7a493a1494172.exe windows x86
742868861227fdd1801b2d02e86adabc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
free
wcstok
_wcsdup
cscdll
CSCPinFileW
gdi32
Polyline
SetROP2
SetTextColor
TranslateCharsetInfo
SetTextAlign
GetDeviceCaps
DeleteObject
ExtTextOutW
SetBkColor
GetTextMetricsW
GetStockObject
SelectObject
CreatePen
CreateFontIndirectW
kernel32
GetLastError
QueryPerformanceCounter
GetTickCount
Sleep
GetCurrentProcessId
LocalFree
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetModuleHandleA
SetUnhandledExceptionFilter
LocalAlloc
GetCurrentProcess
GetProcAddress
VirtualAlloc
activeds
FreeADsMem
user32
CreateWindowExW
SetWindowPos
CheckDlgButton
UnregisterClassW
EndDialog
GetSysColor
RegisterClassW
GetDC
RedrawWindow
GetSystemMetrics
IsDlgButtonChecked
EndPaint
GetParent
GetClientRect
DefWindowProcW
SetWindowLongW
GetDlgCtrlID
SendMessageW
SetRect
GetDlgItem
EndDeferWindowPos
DeferWindowPos
LoadCursorW
BeginDeferWindowPos
ReleaseDC
BeginPaint
DrawFocusRect
SetFocus
DialogBoxParamW
GetWindowLongW
Sections
.textbss Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 432B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE