Static task
static1
Behavioral task
behavioral1
Sample
c42c323c6c9d1f27e6dfa4abbe3d82fb0217404e54e901e5630cbe9415881fbe.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c42c323c6c9d1f27e6dfa4abbe3d82fb0217404e54e901e5630cbe9415881fbe.exe
Resource
win10v2004-20220812-en
General
-
Target
c42c323c6c9d1f27e6dfa4abbe3d82fb0217404e54e901e5630cbe9415881fbe
-
Size
236KB
-
MD5
1da06e38085bd6cf73804f4d913f1906
-
SHA1
76e59a38f5a28e4228f35c91c3bb973b1227a5b7
-
SHA256
c42c323c6c9d1f27e6dfa4abbe3d82fb0217404e54e901e5630cbe9415881fbe
-
SHA512
8e8bbd5b8ee7ae750b7a42d2c2687422ce636bed9e827a35ac43a1ed39c1fe0951bb576610accdec83eda6dd11a72274eb38121a76078e29a62733c9b4fb07d0
-
SSDEEP
1536:1o7NNaYoQfD8uFs/Si9hkoLe/0rIscxq2RPgDAY/xgH0njXAf4UXPrGYZO2UxctU:sNNawfQuFsaiR3Eb0ZziC07fftt9i5
Malware Config
Signatures
Files
-
c42c323c6c9d1f27e6dfa4abbe3d82fb0217404e54e901e5630cbe9415881fbe.exe windows x86
39ebbf58a8d833e33d12388c4090d447
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyW
lstrcpyA
GetVersionExA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LoadLibraryExA
LocalAlloc
CreateActCtxA
Sleep
GetConsoleMode
IsDebuggerPresent
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
user32
GetClassInfoExA
wvsprintfW
RegisterClassExA
UnregisterClassW
wsprintfA
GetClassInfoW
RegisterClassExW
MessageBoxA
UnregisterClassA
ShowWindow
GetClassInfoA
wvsprintfA
RegisterClassW
RegisterClassA
GetClassInfoExW
gdi32
GetClipBox
GetGraphicsMode
SelectObject
CreateFontIndirectA
SetTextColor
CreatePen
Sections
.text Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ