Static task
static1
Behavioral task
behavioral1
Sample
c670d9d8e560db8f977411010318f47bd9b8a8d1f7084fb1c9eb3c0921bbbd83.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c670d9d8e560db8f977411010318f47bd9b8a8d1f7084fb1c9eb3c0921bbbd83.exe
Resource
win10v2004-20220812-en
General
-
Target
c670d9d8e560db8f977411010318f47bd9b8a8d1f7084fb1c9eb3c0921bbbd83
-
Size
593KB
-
MD5
6a03faa0ed268b19720019d70974e96b
-
SHA1
cf18be1178c0a326930d37f02b023c231d463a97
-
SHA256
c670d9d8e560db8f977411010318f47bd9b8a8d1f7084fb1c9eb3c0921bbbd83
-
SHA512
1a8c282af7be200c9917e5c6c81f4901d3f9f0b0db6b4e1755c33044c2e5bb7b0577f59afcfbd73b4a01500ea4eadd70f0838b120be859b7a719b701ae3fabd4
-
SSDEEP
12288:eoERhw4Soqsp5ULvVu2KP9rHeXEar+lN/f18QtNxy9RrOPT8IPIxA:efR24SoBp5WvZm9rckNX3tNxARsP
Malware Config
Signatures
Files
-
c670d9d8e560db8f977411010318f47bd9b8a8d1f7084fb1c9eb3c0921bbbd83.exe windows x86
504b969d30f2a2bb17fd24ef1331efc9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetFocus
SetWindowPos
EndPaint
PeekMessageA
GetDC
ReleaseDC
GetKeyState
DestroyWindow
GetParent
ShowWindow
EnableWindow
TranslateMessage
IsWindowEnabled
LoadStringA
EnableMenuItem
RegisterClassA
CreateWindowExA
FillRect
DispatchMessageA
MapWindowPoints
BeginPaint
DefWindowProcA
GetSystemMetrics
GetWindowRect
IsIconic
PostMessageA
ReleaseCapture
SetWindowLongA
PtInRect
SetTimer
GetDlgItem
ScreenToClient
LoadCursorA
GetDesktopWindow
SetForegroundWindow
EndDialog
GetSysColor
IsWindowVisible
wsprintfA
GetClientRect
CallWindowProcA
SetCursor
kernel32
GetStdHandle
ReleaseMutex
FileTimeToSystemTime
GetFileAttributesA
HeapDestroy
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetConsoleMode
CreateFileA
GetCPInfo
GetStringTypeA
GetSystemTimeAsFileTime
InterlockedExchange
WriteFile
SetStdHandle
HeapReAlloc
GetStringTypeW
GetFullPathNameA
LocalFree
InitializeCriticalSection
LoadResource
FindClose
InterlockedDecrement
FormatMessageA
SetLastError
GetEnvironmentVariableA
IsDebuggerPresent
GetVersionExA
GetModuleFileNameA
UnhandledExceptionFilter
TlsGetValue
MultiByteToWideChar
SetFilePointer
CreateThread
SetUnhandledExceptionFilter
TerminateProcess
GetLastError
GetCurrentThreadId
GetVersion
GetCurrentProcessId
GetTickCount
GetCommandLineA
GetModuleHandleA
ExitProcess
GetCurrentThread
HeapAlloc
GetProcessHeap
VirtualAlloc
FindResourceA
Sleep
VirtualFree
UnmapViewOfFile
GetEnvironmentStrings
GlobalLock
GetACP
CloseHandle
ReadFile
MapViewOfFile
RaiseException
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
SizeofResource
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
lstrlenA
HeapCreate
LCMapStringW
LeaveCriticalSection
TlsSetValue
GetFileType
CreateFileW
GetTimeZoneInformation
GetProcAddress
DuplicateHandle
CompareStringA
lstrcpyA
lstrcmpA
WaitForMultipleObjects
DeleteFileW
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
FreeLibrary
GetVersionExW
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
SetEndOfFile
GlobalAlloc
gdi32
DeleteObject
GetDeviceCaps
DeleteDC
SetTextColor
Sections
.text Size: 547KB - Virtual size: 870KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ