Static task
static1
Behavioral task
behavioral1
Sample
c020ce3d749af04a9f2747a6a1c2a7317853c9eec5388378c3368035945419e9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c020ce3d749af04a9f2747a6a1c2a7317853c9eec5388378c3368035945419e9.exe
Resource
win10v2004-20221111-en
General
-
Target
c020ce3d749af04a9f2747a6a1c2a7317853c9eec5388378c3368035945419e9
-
Size
102KB
-
MD5
1d77d2adb1cd7ddcdcd3be0380dbf0d9
-
SHA1
fb3cd8047955ff5eb8e80f97b13c5db965a13e05
-
SHA256
c020ce3d749af04a9f2747a6a1c2a7317853c9eec5388378c3368035945419e9
-
SHA512
cc44cb46f8d179c8bbbda5213826aa37c4cc1691c4bc9e2188092d6aeee610bb4ea79128564e28c25568457dfd74d2b2834a878a3bce3d54744b0a072e6eefae
-
SSDEEP
3072:8ihK5R0ScQT6VK84nU9jIBRoTS+H6yU0:bsn+gAK8b9jITIS+F
Malware Config
Signatures
Files
-
c020ce3d749af04a9f2747a6a1c2a7317853c9eec5388378c3368035945419e9.exe windows x86
d2dec9d3cbe57c63c0e23f9ee53f7d6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EmptyClipboard
SendMessageW
UpdateWindow
GetFocus
PtInRect
ReleaseCapture
MessageBeep
IntersectRect
LoadIconW
SetRect
MessageBoxW
kernel32
HeapAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
Sleep
HeapFree
IsValidCodePage
GetOEMCP
GetACP
CreateSemaphoreA
GetEnvironmentStringsW
GetCommandLineA
CreateMutexA
GetStdHandle
CreateEventA
GetTickCount
GetEnvironmentStrings
HeapReAlloc
GetVersionExA
GetCurrentProcessId
GetPriorityClass
GetProcessVersion
GetCommandLineW
GetModuleHandleA
lstrcmpA
VirtualAlloc
LocalFree
DeleteFileW
WriteFile
FormatMessageW
FreeLibrary
LoadLibraryA
GetModuleHandleW
GlobalAlloc
SetEndOfFile
HeapCreate
GetCurrentThread
UnhandledExceptionFilter
GetCPInfo
GetLocaleInfoW
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetProcAddress
ExitProcess
DecodePointer
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapDestroy
QueryPerformanceCounter
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
InterlockedExchange
LoadLibraryW
crypt32
CertFindCTLInStore
rtm
RtmReleaseEntities
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ