Static task
static1
Behavioral task
behavioral1
Sample
cf54bcc921b55a21c77ba64ab4158c553e5d4108d0f8aabd4446e90e25e60559.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cf54bcc921b55a21c77ba64ab4158c553e5d4108d0f8aabd4446e90e25e60559.exe
Resource
win10v2004-20221111-en
General
-
Target
cf54bcc921b55a21c77ba64ab4158c553e5d4108d0f8aabd4446e90e25e60559
-
Size
600KB
-
MD5
2437d98c65695997bf55b38b3de4bf4c
-
SHA1
6d1ff200b36d238c54003c18c64cfb552bc4d4ae
-
SHA256
cf54bcc921b55a21c77ba64ab4158c553e5d4108d0f8aabd4446e90e25e60559
-
SHA512
1e68c53602c64ab682ec27155bb1613aa796ab26df3067d0edd2fd7240d8639687cf21e4259dcc0a7ba3a4d6680383b4b9e0fe9de6f7991339e7e28af1bab50e
-
SSDEEP
12288:1KsEQe/c8xCeFbKX4t07t0zTxIBxZmEiS4WW1hOlK9XrJuTwYV888888888G88u2:1Ksbe/hpFbWMIPYxSpW1eKrEw
Malware Config
Signatures
Files
-
cf54bcc921b55a21c77ba64ab4158c553e5d4108d0f8aabd4446e90e25e60559.exe windows x86
85214b9631d88300aaf7982572bcd56f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetScrollPos
RegisterClassExA
EnumPropsW
RegisterClassA
CharNextExA
CreateCursor
LookupIconIdFromDirectoryEx
IsDialogMessageA
SetWindowsHookW
CharLowerW
InvalidateRect
IsMenu
GetWindowRgn
CheckDlgButton
CreateWindowExW
DefWindowProcW
CopyIcon
MessageBoxW
OffsetRect
DdeDisconnect
GetDC
ShowWindow
GetClassInfoExA
GetMenuItemCount
SetPropA
GetUpdateRgn
DlgDirListComboBoxA
CheckMenuRadioItem
ShowCaret
SetDlgItemTextW
DestroyWindow
kernel32
VirtualProtect
SetStdHandle
GetFileType
VirtualAlloc
GetACP
HeapAlloc
FindNextChangeNotification
SetComputerNameW
GetProcAddress
MultiByteToWideChar
GetStdHandle
FormatMessageA
LCMapStringW
ExpandEnvironmentStringsA
GetTimeZoneInformation
EnterCriticalSection
CompareStringW
ReadConsoleOutputA
CompareStringA
AddAtomA
GetCurrentDirectoryW
InitializeCriticalSection
FindResourceW
GetCurrentThreadId
HeapCreate
FreeLibrary
GlobalReAlloc
SetThreadPriority
ExitProcess
GetThreadPriorityBoost
GetModuleFileNameA
GlobalUnlock
SetFilePointer
GetEnvironmentStrings
WideCharToMultiByte
TerminateProcess
LoadLibraryA
HeapFree
VirtualFree
InterlockedExchangeAdd
GetEnvironmentStringsW
EnumResourceNamesA
FindResourceExW
GetUserDefaultLCID
SetEnvironmentVariableA
lstrcpyW
GetEnvironmentVariableA
GetVersionExA
EnumResourceTypesW
DeleteCriticalSection
GetCurrentProcess
GetProfileSectionW
WriteFile
UnhandledExceptionFilter
VirtualQuery
GetLastError
GetNamedPipeInfo
GetCommandLineW
WaitCommEvent
SetThreadIdealProcessor
LCMapStringA
ReadFile
TlsAlloc
TlsFree
IsValidLocale
ResumeThread
VirtualFreeEx
ReadConsoleOutputW
PulseEvent
CreateMutexA
GetCurrencyFormatA
GetSystemInfo
GetOEMCP
GetStartupInfoA
GetStartupInfoW
EnumTimeFormatsW
SetWaitableTimer
GetTempFileNameW
LocalAlloc
ReadConsoleInputW
LoadLibraryW
TlsSetValue
FlushFileBuffers
GetLocaleInfoA
GetModuleHandleA
TlsGetValue
ExitThread
SetHandleCount
GetProcessAffinityMask
GetStringTypeW
CreateProcessA
DosDateTimeToFileTime
GetSystemTimeAsFileTime
SetConsoleActiveScreenBuffer
InterlockedExchange
CloseHandle
QueryPerformanceCounter
WaitNamedPipeA
GetPrivateProfileSectionNamesW
GetDateFormatA
FreeEnvironmentStringsA
HeapSize
GetCurrentProcessId
GetStringTypeA
GetTickCount
GetModuleFileNameW
CreateFileW
IsBadWritePtr
OpenMutexA
InterlockedDecrement
GlobalFlags
VirtualProtectEx
FreeEnvironmentStringsW
GetFileAttributesExA
lstrlenA
LeaveCriticalSection
EnumDateFormatsExW
ExpandEnvironmentStringsW
HeapDestroy
GetTimeFormatA
FoldStringW
EnumSystemLocalesA
HeapReAlloc
GetProcAddress
IsValidCodePage
GetLocaleInfoW
FileTimeToLocalFileTime
GetCurrentThread
LoadModule
GetFileAttributesA
DebugActiveProcess
SetLastError
RtlUnwind
GetCommandLineA
GetCPInfo
comctl32
ImageList_Add
CreatePropertySheetPageW
ImageList_LoadImageA
CreateMappedBitmap
ImageList_EndDrag
ImageList_SetImageCount
CreateStatusWindowW
ImageList_GetBkColor
ImageList_GetImageCount
ImageList_DragShowNolock
ImageList_DragMove
ImageList_Read
CreatePropertySheetPage
InitCommonControlsEx
ImageList_BeginDrag
Sections
.text Size: 176KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ