Static task
static1
Behavioral task
behavioral1
Sample
c0529ace8d8b61a73a94dd26f67b352d96ce18dc2c16d45145dd6a16ea156fbc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c0529ace8d8b61a73a94dd26f67b352d96ce18dc2c16d45145dd6a16ea156fbc.exe
Resource
win10v2004-20220812-en
General
-
Target
c0529ace8d8b61a73a94dd26f67b352d96ce18dc2c16d45145dd6a16ea156fbc
-
Size
311KB
-
MD5
0f33a4ff3123100c40ea5c30dd7d69d1
-
SHA1
24c270549027e3ede0d10ffb82ee522d8b48a177
-
SHA256
c0529ace8d8b61a73a94dd26f67b352d96ce18dc2c16d45145dd6a16ea156fbc
-
SHA512
7f79fde586f309dca8f762c94117802df192741154170b027ca02146f353abf830cdaa14fe0895d1acf6bf21d79bb4fce82296fece2ef58bc498408a70a65fe8
-
SSDEEP
6144:ayYMRru8uSrqXuJ9Ai1T2s6uCJWXuIukp9Z31yafjFnEtDkWFlLIBSA8pA:XZTu8qXuzAi1T2LVJcuIfpn3oKhIvf0e
Malware Config
Signatures
Files
-
c0529ace8d8b61a73a94dd26f67b352d96ce18dc2c16d45145dd6a16ea156fbc.exe windows x86
4d1741086f17cf71e61763a6da6fd18b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileIntA
RemoveDirectoryW
FindClose
GetCurrentProcess
GetCurrentThread
GetFileAttributesW
GetPrivateProfileSectionA
GetStringTypeA
DeviceIoControl
GlobalLock
SetLastError
LocalFlags
GetVersionExA
HeapFree
GetStdHandle
GetModuleHandleA
CloseHandle
CreateEventA
GetFileAttributesW
VirtualProtectEx
CreateDirectoryW
user32
IsDialogMessageA
InsertMenuW
DispatchMessageA
SetCursorPos
PeekMessageW
SetFocus
LoadCursorW
GetWindowLongW
PostMessageW
IsWindow
IsZoomed
GetWindowTextW
wsprintfW
ntmarta
AccConvertSDToAccess
AccGetExplicitEntries
AccConvertAclToAccess
AccFreeIndexArray
uxtheme
CloseThemeData
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ