Static task
static1
Behavioral task
behavioral1
Sample
c03b99d98e6d5c5886fcdcbfb5f914a311559e5261202c5a639df9e26a4ca47b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c03b99d98e6d5c5886fcdcbfb5f914a311559e5261202c5a639df9e26a4ca47b.exe
Resource
win10v2004-20220812-en
General
-
Target
c03b99d98e6d5c5886fcdcbfb5f914a311559e5261202c5a639df9e26a4ca47b
-
Size
281KB
-
MD5
0d2dbb5dcad6d24ed2f373e03f4d1d6c
-
SHA1
83e0383507a19f337d1a7b259193cd1e2f86b33e
-
SHA256
c03b99d98e6d5c5886fcdcbfb5f914a311559e5261202c5a639df9e26a4ca47b
-
SHA512
bb561bafa4adc23d39f8b6b18c70b56b1fee8a23ebd7aa152d8c05c5abeed9e44d8ccc34eb477f67c79720494ff79600d0ace4355cd84f84ad6660a30788f51f
-
SSDEEP
6144:jsOchoG0cWhl5SEoo6Rm/9+uULk0IvyTtb5WGiUK:jslt0Dl5SC6RI9+uSkLStor
Malware Config
Signatures
Files
-
c03b99d98e6d5c5886fcdcbfb5f914a311559e5261202c5a639df9e26a4ca47b.exe windows x86
763e7e1e186e0108670604276208dea5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalCompact
GetCurrencyFormatW
CopyFileExW
CreateTapePartition
GetBinaryTypeA
FileTimeToDosDateTime
SetLocaleInfoW
lstrlenA
GetVersionExA
HeapLock
FindFirstChangeNotificationW
GetModuleHandleA
GetProcessShutdownParameters
CreateFileA
GlobalReAlloc
FreeEnvironmentStringsA
GetAtomNameA
GetNumberOfConsoleMouseButtons
ReadConsoleInputW
ReadFileEx
DeleteFiber
GetDriveTypeA
GetStartupInfoW
WritePrivateProfileStructA
GetCPInfoExA
SearchPathW
GlobalGetAtomNameW
SetFileApisToOEM
GetCalendarInfoW
AddAtomW
ReadConsoleW
FlushInstructionCache
EndUpdateResourceA
WritePrivateProfileStructW
CreateMailslotA
FindAtomA
VirtualProtectEx
CreateConsoleScreenBuffer
GetDriveTypeW
GetPrivateProfileSectionA
GetNumberOfConsoleInputEvents
VirtualUnlock
Process32Next
GetStartupInfoA
SwitchToThread
SleepEx
WriteConsoleA
SetComputerNameW
SetSystemTime
IsBadHugeReadPtr
VirtualAllocEx
InterlockedIncrement
GetProfileSectionA
DisableThreadLibraryCalls
LoadResource
DuplicateHandle
GlobalMemoryStatus
GetCommConfig
GetFileAttributesExA
_lcreat
GetWindowsDirectoryW
SetProcessWorkingSetSize
DosDateTimeToFileTime
MoveFileExA
GetACP
FindResourceA
InterlockedDecrement
CreateProcessA
EnumDateFormatsW
HeapCreate
GetProfileIntA
TransmitCommChar
GetOverlappedResult
GetDiskFreeSpaceExA
SetUnhandledExceptionFilter
ReadFileScatter
user32
SetDlgItemTextA
CheckDlgButton
CharLowerBuffA
CharPrevW
FindWindowExA
GetInputState
BeginPaint
UnhookWindowsHookEx
CreateWindowStationW
ChildWindowFromPointEx
GetClipboardOwner
LookupIconIdFromDirectoryEx
RegisterWindowMessageA
GetDlgItemTextA
OemToCharBuffW
SetMenuItemInfoA
InsertMenuItemA
DrawEdge
CreateWindowExW
EndDialog
CharToOemW
SetDebugErrorLevel
VkKeyScanW
GetMessageTime
DrawStateW
GetSystemMenu
GetMenuItemID
SetMessageQueue
SendMessageTimeoutW
SetKeyboardState
wsprintfA
GetWindowContextHelpId
ScreenToClient
SetDoubleClickTime
CopyAcceleratorTableW
GetDC
ClientToScreen
wvsprintfW
GetMenu
IsDialogMessageA
FlashWindow
RedrawWindow
GetClassNameW
SwitchToThisWindow
GetNextDlgGroupItem
SetCaretPos
TranslateMDISysAccel
DefFrameProcA
GetTabbedTextExtentA
gdi32
GetEnhMetaFileA
GetClipRgn
FillRgn
ScaleViewportExtEx
SetRectRgn
GetTextFaceA
GetWorldTransform
GetEnhMetaFileDescriptionA
CreateColorSpaceW
AngleArc
GetCharABCWidthsA
GetTextExtentPoint32W
CreateCompatibleBitmap
GetNearestColor
DeleteEnhMetaFile
PlayEnhMetaFileRecord
SetTextJustification
EnumObjects
SetDIBitsToDevice
PolyDraw
GetColorSpace
ResizePalette
PlayEnhMetaFile
GetTextCharset
GetCharABCWidthsFloatA
GetICMProfileW
PolyPolyline
CloseEnhMetaFile
RectVisible
EnumFontsA
CreateEllipticRgnIndirect
SetPixel
ModifyWorldTransform
CreateBrushIndirect
GetTextColor
PlgBlt
SetTextAlign
GetWinMetaFileBits
SetArcDirection
comdlg32
ChooseFontA
advapi32
ObjectCloseAuditAlarmW
ControlService
OpenBackupEventLogW
OpenSCManagerA
SetTokenInformation
FindFirstFreeAce
RegSetValueA
BuildImpersonateExplicitAccessWithNameA
CryptEnumProviderTypesW
BuildExplicitAccessWithNameA
OpenEventLogW
RegQueryValueW
LogonUserA
QueryServiceLockStatusW
RegEnumValueW
GetNamedSecurityInfoA
GetNamedSecurityInfoW
RegSaveKeyA
RegUnLoadKeyA
RegUnLoadKeyW
AccessCheckAndAuditAlarmW
GetServiceDisplayNameA
shell32
SHGetPathFromIDListW
SHFileOperationW
SHGetPathFromIDListA
Shell_NotifyIconA
SHGetMalloc
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
Sections
.text Size: 264KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE