Static task
static1
Behavioral task
behavioral1
Sample
c27f6200c290d67dbbb68fa16140052a39a7de43a414ffc13bf226b7a62fa377.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c27f6200c290d67dbbb68fa16140052a39a7de43a414ffc13bf226b7a62fa377.exe
Resource
win10v2004-20221111-en
General
-
Target
c27f6200c290d67dbbb68fa16140052a39a7de43a414ffc13bf226b7a62fa377
-
Size
91KB
-
MD5
c4f23a4d20933ace80c80ec9353e8319
-
SHA1
e51f7068e31481a684b6c3e0f6f4d617c98a0841
-
SHA256
c27f6200c290d67dbbb68fa16140052a39a7de43a414ffc13bf226b7a62fa377
-
SHA512
7526da51aad23529b039caa679c07a4d5f3ac93a8c64438cf987aed395e633abda856e04a3de70b38a84324870d43875a63a87ccad4df23de8a995f97bc9e38b
-
SSDEEP
1536:TvFclc5QShIWPq4O0xISB9nKFgnrYDvRVc66sWjcdh19:Tgc5QShIWp9KqnK5lD
Malware Config
Signatures
Files
-
c27f6200c290d67dbbb68fa16140052a39a7de43a414ffc13bf226b7a62fa377.exe windows x86
515c97234ae103cb5362a22c9ec3046d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoInitializeSecurity
CoInitializeEx
CoUninitialize
shell32
CommandLineToArgvW
ShellExecuteW
kernel32
ExitProcess
FlushFileBuffers
LCMapStringW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
CreateFileW
GetShortPathNameW
WriteFile
CloseHandle
GetVersionExA
GetModuleFileNameW
LoadResource
LockResource
SizeofResource
lstrcpyW
lstrcatW
FindResourceA
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
GetLastError
GetCurrentThreadId
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
GetConsoleCP
GetConsoleMode
SetFilePointerEx
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapFree
LoadLibraryExW
RtlUnwind
OutputDebugStringW
SetStdHandle
WriteConsoleW
GetStringTypeW
HeapAlloc
HeapReAlloc
HeapSize
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ