Static task
static1
Behavioral task
behavioral1
Sample
c07225aa2e57e38bf3ed0d6e7e4c145d221efe7e4e85fd1d85c3d7f812387cdd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c07225aa2e57e38bf3ed0d6e7e4c145d221efe7e4e85fd1d85c3d7f812387cdd.exe
Resource
win10v2004-20221111-en
General
-
Target
c07225aa2e57e38bf3ed0d6e7e4c145d221efe7e4e85fd1d85c3d7f812387cdd
-
Size
213KB
-
MD5
52cec745320f1f6a5b25b5f40034137e
-
SHA1
e1b3033924448baf3091de0a1b2563a91d5e5a06
-
SHA256
c07225aa2e57e38bf3ed0d6e7e4c145d221efe7e4e85fd1d85c3d7f812387cdd
-
SHA512
9f6caa728f6d82123cfe2e71788691e788e3521f1920e19f7dae1cdf0a6283289ec6a496bc130dcfdc33e21c52bcbd2b75ba6275d552c3805c09b8e3961296ba
-
SSDEEP
3072:oZWp7RO+LewW/Ht3EZesxGynX5yJxKgO0rkYbt1bbnJuZeK5b4baD7eNkk:ldO+LekZes4yX5y+D0Qgj2rMOk
Malware Config
Signatures
Files
-
c07225aa2e57e38bf3ed0d6e7e4c145d221efe7e4e85fd1d85c3d7f812387cdd.exe windows x86
1cc13a0445f76e38f13ecdb888d063d8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
quartz
AmpFactorToDB
DllGetClassObject
DllRegisterServer
AMGetErrorTextW
DllUnregisterServer
DllCanUnloadNow
DBToAmpFactor
AMGetErrorTextA
kernel32
GetCurrentProcess
lstrcmpA
SystemTimeToFileTime
LoadLibraryW
GetProcessHeap
lstrlenA
GetOEMCP
HeapAlloc
GetTickCount
lstrcpyA
GetCurrentProcessId
LoadResource
GetSystemTimeAsFileTime
GetSystemDefaultLCID
FreeResource
HeapFree
GetEnvironmentStringsW
WideCharToMultiByte
SetLastError
SetUnhandledExceptionFilter
GetUserDefaultLCID
QueryPerformanceCounter
MultiByteToWideChar
GetVolumeInformationA
CreateFileA
QueryDosDeviceA
DeviceIoControl
GetLocaleInfoW
CloseHandle
LockResource
FindResourceA
GetLocalTime
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyW
user32
wsprintfA
CharNextA
Sections
.text Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ