Static task
static1
Behavioral task
behavioral1
Sample
c25ca9b1069efda12b6f91c03d34d9f24f04d21a3b835a5532a7ed4184a781d7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c25ca9b1069efda12b6f91c03d34d9f24f04d21a3b835a5532a7ed4184a781d7.exe
Resource
win10v2004-20220812-en
General
-
Target
c25ca9b1069efda12b6f91c03d34d9f24f04d21a3b835a5532a7ed4184a781d7
-
Size
1.2MB
-
MD5
558b9ef21d25f3d14b00764ec7c9cd82
-
SHA1
b668ff43a1793a5d3c099291b53516d5ecf6cebe
-
SHA256
c25ca9b1069efda12b6f91c03d34d9f24f04d21a3b835a5532a7ed4184a781d7
-
SHA512
5b1bfcbb6431524bf62dd7c2c9ae5ecb946e89268f883426cb2b30bf0e2c8b8b95f5d0f8883d5a801edc2b8694af3eca8a84e5cece6d82f5facd19058d454262
-
SSDEEP
24576:9QiuMT98w+0d82/wG4ZqItFPqh6pZRj35fdcuIM:9/T9N2zsItFa6pZqu
Malware Config
Signatures
Files
-
c25ca9b1069efda12b6f91c03d34d9f24f04d21a3b835a5532a7ed4184a781d7.exe windows x86
9d9a8cc1640d2e7ac16d94ce528246d3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
LoadLibraryW
GetModuleFileNameW
WideCharToMultiByte
InterlockedDecrement
LockResource
VirtualAlloc
TerminateProcess
ReadProcessMemory
WriteProcessMemory
GetThreadContext
LoadResource
SizeofResource
GetModuleFileNameA
GetLastError
CreateProcessA
GetCommandLineA
FindResourceW
FindResourceExW
MultiByteToWideChar
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
GetCurrentProcess
GetProcAddress
GetModuleHandleW
FreeLibrary
LocalFree
CreateFileW
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
GetCommandLineW
EncodePointer
DecodePointer
RtlUnwind
SetLastError
InterlockedIncrement
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsProcessorFeaturePresent
Sleep
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
LCMapStringW
CloseHandle
advapi32
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
ole32
CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoInitializeEx
oleaut32
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantClear
shlwapi
PathFindFileNameW
Sections
.text Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 902KB - Virtual size: 902KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ