Static task
static1
Behavioral task
behavioral1
Sample
c5d39b2873f53daba0a0debb050e345cc2bea73f6fd6e32c9dbdbd14489013e9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c5d39b2873f53daba0a0debb050e345cc2bea73f6fd6e32c9dbdbd14489013e9.exe
Resource
win10v2004-20220812-en
General
-
Target
c5d39b2873f53daba0a0debb050e345cc2bea73f6fd6e32c9dbdbd14489013e9
-
Size
194KB
-
MD5
a1556f35cb24bd841ed5e065c6aee3d6
-
SHA1
13eb06d21dedc581f9cfb65d4ca42d60fbfd6576
-
SHA256
c5d39b2873f53daba0a0debb050e345cc2bea73f6fd6e32c9dbdbd14489013e9
-
SHA512
7f84a8d777baa1091a36886f83564cec22eb6eba70902faeb39cd28ba1a5a63379440426242745c34f5d1b4fb5f5b789a6db9d2b20f1a3a0af163a56e2d94695
-
SSDEEP
3072:Z9Uk+uat3372MhVcCMeOXVLRmYmQAV/0WycSy8ICg82EukAXlbNdi:TUmap372MhVcCHBj8NcSyCst9v
Malware Config
Signatures
Files
-
c5d39b2873f53daba0a0debb050e345cc2bea73f6fd6e32c9dbdbd14489013e9.exe windows x86
564f6ce3bce14820621d4084640598be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegDeleteValueW
RegQueryValueExW
AdjustTokenPrivileges
kernel32
lstrcpynW
lstrcpyW
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
LocalFree
LoadLibraryW
GetTickCount
GetTempPathW
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
GetLastError
GetFullPathNameW
GetFileAttributesW
GetDateFormatW
GetCurrentProcessId
GetCurrentProcess
GetCommandLineA
FreeLibrary
FormatMessageW
FileTimeToSystemTime
ExitProcess
CloseHandle
lstrlenW
msvcrt
_XcptFilter
__p__commode
__p__fmode
__set_app_type
__wgetmainargs
__winitenv
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_wcsicmp
_wfopen
exit
fclose
fputws
fwprintf
iswalpha
wcscat
wcschr
wcscmp
wcsrchr
_wcsnicmp
setupapi
CM_Free_Res_Des_Handle
CM_Disconnect_Machine
CM_Get_First_Log_Conf_Ex
CM_Connect_MachineW
CM_Get_Next_Res_Des_Ex
CM_Get_Res_Des_Data_Ex
CM_Locate_DevNode_ExW
CM_Reenumerate_DevNode_Ex
SetupCloseFileQueue
SetupDiBuildClassInfoListExW
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
SetupDiClassGuidsFromNameExW
SetupDiClassNameFromGuidExW
SetupDiCreateDeviceInfoListExW
SetupDiGetINFClassW
SetupDiCreateDeviceInfoW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDescriptionExW
SetupScanFileQueueW
SetupOpenFileQueue
SetupDiSetDeviceRegistryPropertyW
SetupDiSetDeviceInstallParamsW
SetupDiSetClassInstallParamsW
SetupDiOpenDeviceInfoW
SetupDiOpenDevRegKey
SetupDiGetClassDevsExW
SetupDiGetDriverInstallParamsW
SetupDiGetDriverInfoDetailW
SetupDiGetDeviceRegistryPropertyW
CM_Disable_DevNode_Ex
SetupDiGetDeviceInstallParamsW
gdi32
UnrealizeObject
StretchBlt
SetWindowOrgEx
SetWindowExtEx
SetWinMetaFileBits
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SelectClipRgn
SaveDC
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
PolyPolyline
PlayEnhMetaFile
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsA
GetTextExtentPointA
GetTextExtentPoint32A
GetSystemPaletteEntries
GetStockObject
GetPixel
GetPaletteEntries
GetObjectA
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
ExtTextOutA
ExtCreatePen
ExcludeClipRect
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectA
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
BitBlt
Sections
.text Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ