Static task
static1
Behavioral task
behavioral1
Sample
c440cc8d7db7e9bdca34da06c4853c0de9730f9ab994f7c005ea120d24156723.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c440cc8d7db7e9bdca34da06c4853c0de9730f9ab994f7c005ea120d24156723.exe
Resource
win10v2004-20221111-en
General
-
Target
c440cc8d7db7e9bdca34da06c4853c0de9730f9ab994f7c005ea120d24156723
-
Size
272KB
-
MD5
970d3c7437e71364d9347db472fd5905
-
SHA1
5bd71f426229cda78e1ee9dbb1c59728fd6b4842
-
SHA256
c440cc8d7db7e9bdca34da06c4853c0de9730f9ab994f7c005ea120d24156723
-
SHA512
7662c7942bd0b54fb46b4388e1b76824eb9ff4f13247aadb0b512706fc50f8b4d381c484b755fb673f2df69399f50175b02c180245d0dcc29c81fe9ed1eb9ba1
-
SSDEEP
6144:srSsuaZGzLI2hXWaBn4GgmRhXjxS6fgALAo4pg+dF0SsQLH5AL:srSsOzE2lBFr5zNSsPL
Malware Config
Signatures
Files
-
c440cc8d7db7e9bdca34da06c4853c0de9730f9ab994f7c005ea120d24156723.exe windows x86
8492c2acbedb74fd6f835f75838c5ebd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetVersionExA
SetFilePointer
ReadFile
CreateFileA
GetCurrentProcess
lstrcpynA
GetPrivateProfileSectionA
GetSystemDefaultLCID
GetModuleFileNameA
CreateProcessA
CreateMutexA
SetLastError
CreateDirectoryA
MulDiv
GetExitCodeProcess
WaitForSingleObject
CopyFileA
GetFullPathNameA
GetTempPathA
SetEndOfFile
IsBadCodePtr
IsBadReadPtr
GlobalAlloc
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
IsBadWritePtr
HeapReAlloc
InterlockedExchange
SetStdHandle
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
TerminateProcess
GetFileType
GetStdHandle
SetHandleCount
GetCPInfo
GetOEMCP
GetACP
LCMapStringW
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GlobalFree
CreateThread
LocalAlloc
OpenMutexA
CloseHandle
GetLastError
FormatMessageA
LocalFree
IsDBCSLeadByte
lstrcmpiA
GetPrivateProfileIntA
lstrcmpA
GetPrivateProfileStringA
ExpandEnvironmentStringsA
lstrcatA
FindFirstFileA
FindNextFileA
FindClose
GetFileAttributesA
SetFileAttributesA
lstrlenA
lstrcpyA
WideCharToMultiByte
MultiByteToWideChar
SetUnhandledExceptionFilter
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FlushFileBuffers
WriteFile
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
DeleteFileA
MoveFileA
RtlUnwind
ExitProcess
HeapSize
user32
GetSysColor
GetWindowRect
SetWindowPos
EndPaint
GetSystemMetrics
RegisterClassA
LoadCursorA
SetWindowLongA
GetWindowLongA
DefWindowProcA
BeginPaint
PostMessageA
GetDC
ReleaseDC
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
ExitWindowsEx
CharNextA
FindWindowA
LoadStringA
wsprintfA
MessageBoxA
UnregisterClassA
DestroyWindow
ShowWindow
InvalidateRect
UpdateWindow
SetForegroundWindow
CreateWindowExA
gdi32
RemoveFontResourceA
AddFontResourceA
GetDeviceCaps
SelectObject
SetBkMode
SetTextColor
GetTextExtentPoint32A
TextOutA
CreateFontIndirectA
advapi32
RegDeleteValueA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyExA
RegSetValueExA
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ole32
CoTaskMemAlloc
CoTaskMemFree
CoGetMalloc
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
winmm
PlaySoundA
sqlresld
SQLUIUnloadResourceDLL
SQLUILoadResourceDLL
sqlsut
ClearRunMRU
Sections
.text Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 184KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ