Static task
static1
Behavioral task
behavioral1
Sample
c57d9c198ad9cf497b08ef942b8dec44a219dfff2c4ef03268ecb19ea781119f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c57d9c198ad9cf497b08ef942b8dec44a219dfff2c4ef03268ecb19ea781119f.exe
Resource
win10v2004-20220901-en
General
-
Target
c57d9c198ad9cf497b08ef942b8dec44a219dfff2c4ef03268ecb19ea781119f
-
Size
480KB
-
MD5
1ee904d28eeacc4a9e1abd2272448c3a
-
SHA1
5ce6c4cb8d891ab4f19344e50ba2b5bbba46c590
-
SHA256
c57d9c198ad9cf497b08ef942b8dec44a219dfff2c4ef03268ecb19ea781119f
-
SHA512
e61cfbc7755ac5a2154be052b08d24dcfe0d2fa63c0d636675bb85f16de284e850eb19720793ac482c827bd06a5885e70de64be9c60f0c77ad01daebd448c158
-
SSDEEP
6144:Jk+0HUT18Q9zMzkZxe2VSvFHSBxTWlTjL6Xqs+b2RiRGUp2Phqgx:J20JhpxHEvFHSBx83WX+oiRihqg
Malware Config
Signatures
Files
-
c57d9c198ad9cf497b08ef942b8dec44a219dfff2c4ef03268ecb19ea781119f.exe windows x86
402cc1aae6e8cd2de1a70ae3f1a74545
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleCtrlHandler
UnhandledExceptionFilter
SetStdHandle
CompareStringW
RtlUnwind
FreeLibrary
GetTickCount
CreateMutexA
GetTimeFormatA
VirtualQuery
SetUnhandledExceptionFilter
WriteFile
GetLocaleInfoA
GetConsoleOutputCP
VirtualAlloc
GetStartupInfoA
HeapReAlloc
TlsGetValue
TlsSetValue
GetCurrentThread
LoadLibraryA
DeleteAtom
VirtualFree
RemoveDirectoryW
HeapDestroy
WriteConsoleW
Sleep
GetTimeZoneInformation
EnumSystemLocalesA
IsValidLocale
TerminateProcess
GetEnvironmentStringsW
GetCurrentThreadId
HeapAlloc
GetProcAddress
InterlockedDecrement
GetCommandLineA
FreeEnvironmentStringsW
GetUserDefaultLCID
ReadFile
ReleaseSemaphore
GetStringTypeW
DeleteCriticalSection
GetACP
CompareStringA
GetModuleFileNameA
LCMapStringA
HeapCreate
SetHandleCount
WideCharToMultiByte
MultiByteToWideChar
EnterCriticalSection
GetOEMCP
GetDateFormatA
FlushFileBuffers
HeapSize
FreeEnvironmentStringsA
GetProcessHeap
CloseHandle
IsValidCodePage
SetLastError
HeapFree
GetStringTypeA
GetConsoleMode
LeaveCriticalSection
TlsFree
QueryPerformanceCounter
GetCPInfo
WriteConsoleA
GetSystemTimeAsFileTime
GetEnvironmentStrings
GetLastError
GetStdHandle
InterlockedExchange
LCMapStringW
TlsAlloc
CreateFileA
GetLocaleInfoW
SetFilePointer
GetVersionExA
GetModuleHandleA
InitializeCriticalSection
GetCurrentProcess
OpenMutexA
ExitProcess
GetFileType
GetConsoleCP
IsDebuggerPresent
EnumResourceNamesA
GetCurrentProcessId
SetEnvironmentVariableA
InterlockedIncrement
user32
SendInput
EnumDesktopWindows
IsDialogMessageA
SetMenuDefaultItem
MonitorFromRect
RegisterClassA
ChangeClipboardChain
GetProcessDefaultLayout
SendDlgItemMessageA
RegisterClassExA
DrawStateW
IntersectRect
IsCharUpperA
DlgDirSelectComboBoxExW
InflateRect
SystemParametersInfoW
ToAscii
CloseWindowStation
GetClipboardSequenceNumber
LoadKeyboardLayoutW
IsWindowUnicode
GetIconInfo
GetUserObjectInformationW
InsertMenuItemW
CharLowerA
SetWindowsHookExA
VkKeyScanW
ExitWindowsEx
comctl32
ImageList_DragShowNolock
CreateStatusWindowW
ImageList_Read
CreateStatusWindow
ImageList_Duplicate
ImageList_ReplaceIcon
ImageList_Replace
DestroyPropertySheetPage
ImageList_GetImageCount
ImageList_SetOverlayImage
ImageList_DragLeave
InitCommonControlsEx
CreateToolbar
ImageList_Write
ImageList_AddMasked
ImageList_SetIconSize
shell32
SHFileOperationA
ExtractIconExA
DragQueryPoint
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ