Static task
static1
Behavioral task
behavioral1
Sample
c33d6329b9472d0c9693828067970cd922a1acb8be4926d7b3f0cbce21e15cce.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c33d6329b9472d0c9693828067970cd922a1acb8be4926d7b3f0cbce21e15cce.exe
Resource
win10v2004-20221111-en
General
-
Target
c33d6329b9472d0c9693828067970cd922a1acb8be4926d7b3f0cbce21e15cce
-
Size
206KB
-
MD5
2f0d34dd925b0da60609be68b5a7e465
-
SHA1
9361009ca882ef8ec845d8024d1b5cb4b00264fd
-
SHA256
c33d6329b9472d0c9693828067970cd922a1acb8be4926d7b3f0cbce21e15cce
-
SHA512
908564b73809ab5cc41a9af1b4140ce1572e1f97c9ab06c9dc3d2df85cf162faa8654113ad56f2ecb0fb8145c944422b43b64e13bf07ac6622f8855556d6e858
-
SSDEEP
3072:Tzwun1dbCdoJcBkmUWBMjM5ZXhZK7DNmIXTlXjuy2sYW+RPY:XwS7bbcBaWBLvMhJ6/RPY
Malware Config
Signatures
Files
-
c33d6329b9472d0c9693828067970cd922a1acb8be4926d7b3f0cbce21e15cce.exe windows x86
e6ceb87f2354634ca87834f547084a94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Parent
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdW
CM_Get_Res_Des_Data_Size
CM_Get_Res_Des_Data
SetupDiEnumDeviceInterfaces
CM_Get_Device_IDW
CM_Get_Next_Res_Des
CM_Get_DevNode_Status
SetupDiGetDeviceRegistryPropertyW
CM_Get_First_Log_Conf
CM_Free_Res_Des_Handle
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
winmm
timeBeginPeriod
timeEndPeriod
kernel32
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LoadLibraryA
DeviceIoControl
SizeofResource
GetLastError
CreateFileW
FindResourceExW
FindResourceW
CloseHandle
LoadResource
LockResource
InterlockedDecrement
RaiseException
CreateEventW
WaitForSingleObject
SetEvent
CreateThread
WaitForMultipleObjects
InitializeCriticalSection
DeleteCriticalSection
CreateWaitableTimerW
LeaveCriticalSection
Sleep
LocalAlloc
SetWaitableTimer
EnterCriticalSection
LocalFree
lstrlenA
GetCurrentProcessId
GetSystemTimeAsFileTime
GetExitCodeThread
GetProcessHeap
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
FreeEnvironmentStringsW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
RtlUnwind
user32
UnregisterDeviceNotification
RegisterDeviceNotificationW
UnregisterClassA
advapi32
RegisterServiceCtrlHandlerExW
StartServiceCtrlDispatcherW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
SetServiceStatus
ole32
CoCreateInstance
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize
StringFromGUID2
CoInitializeEx
CoInitialize
oleaut32
SysFreeString
SafeArrayAccessData
VariantInit
SafeArrayUnaccessData
VariantClear
SysAllocString
VariantChangeType
Sections
.text Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.erdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE