Static task
static1
Behavioral task
behavioral1
Sample
c34dc8891043d5d69ff5269e12dd9c686740f867ff05ee4e99638bbb90a94ace.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c34dc8891043d5d69ff5269e12dd9c686740f867ff05ee4e99638bbb90a94ace.exe
Resource
win10v2004-20221111-en
General
-
Target
c34dc8891043d5d69ff5269e12dd9c686740f867ff05ee4e99638bbb90a94ace
-
Size
700KB
-
MD5
0859a060914d4e78dbd41e145f806c51
-
SHA1
c1784a7c4352b0097ae5467e39e16325adb57262
-
SHA256
c34dc8891043d5d69ff5269e12dd9c686740f867ff05ee4e99638bbb90a94ace
-
SHA512
580b0c7315b49eba83e5cc7423d86574b22e9ccc137560298be1a9379d12fb374c4d34681a8b0309350c8b3d415be78f9556561d8694eb998a32f8e057fa3e53
-
SSDEEP
12288:FHcztEZPL2pKoeG/NPNUUYCmMeA0Zog4jVHFLAU88U97qTOzZu:NmpK8ZvAj/q5RFzU97qT
Malware Config
Signatures
Files
-
c34dc8891043d5d69ff5269e12dd9c686740f867ff05ee4e99638bbb90a94ace.exe windows x86
f468d65d301f5edd6f87e7e81d7e0761
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_EndDrag
ImageList_Read
ImageList_Remove
ImageList_DrawEx
ImageList_Create
ImageList_Write
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_BeginDrag
ord17
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
setupapi
SetupDiDestroyDeviceInfoList
wininet
InternetCloseHandle
kernel32
GetModuleHandleW
GetCommandLineW
CopyFileW
SetCurrentDirectoryW
CreateDirectoryW
lstrcmpiW
DeleteFileW
lstrcatW
GetWindowsDirectoryW
GetTempPathW
GetLastError
GetTempPathA
GetSystemInfo
GetStringTypeExA
InterlockedIncrement
GetCPInfo
SetFilePointer
FlushFileBuffers
SetStdHandle
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapReAlloc
HeapAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
HeapFree
CreateFileA
VirtualAlloc
WriteFile
GetVersion
GetProcAddress
CreateFileMappingA
GetStringTypeW
GetStartupInfoA
GetSystemTimeAsFileTime
GetCommandLineA
QueryPerformanceCounter
GetVersionExA
SetErrorMode
ReadFile
ExitProcess
CloseHandle
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
FreeResource
user32
GetWindowPlacement
GetClassInfoA
GetWindowLongA
ShowWindow
GetSystemMenu
GetCapture
GetClassNameA
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
IntersectRect
InvalidateRect
IsChild
IsDialogMessageA
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
CharNextW
gdi32
CreatePen
CreatePenIndirect
ExcludeClipRect
SetEnhMetaFileBits
SetPixel
SetROP2
StretchBlt
UnrealizeObject
DeleteMetaFile
GetLogColorSpaceW
SetAbortProc
GetClipBox
DeleteEnhMetaFile
CreateFontIndirectA
TextOutW
DeleteObject
OffsetWindowOrgEx
comdlg32
ChooseFontA
ReplaceTextW
GetOpenFileNameA
PageSetupDlgW
GetSaveFileNameA
advapi32
RegQueryValueExW
RegCloseKey
shell32
StrStrIA
SHGetFileInfoW
ShellExecuteA
ole32
OleUninitialize
OleInitialize
CoTaskMemAlloc
oleaut32
VariantInit
VarDecRound
VarRound
VarNumFromParseNum
VariantChangeType
SafeArrayCreate
SafeArrayRedim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayPutElement
Sections
.texT Size: 568KB - Virtual size: 567KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE