Static task
static1
Behavioral task
behavioral1
Sample
0cea31036a4216e9844bd9e1ba7ce4835bf0d751a640a797610312bfdf576a45.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0cea31036a4216e9844bd9e1ba7ce4835bf0d751a640a797610312bfdf576a45.exe
Resource
win10v2004-20220812-en
General
-
Target
0cea31036a4216e9844bd9e1ba7ce4835bf0d751a640a797610312bfdf576a45
-
Size
734KB
-
MD5
2e9d2e5b07c24f1ce6e4842772e31df0
-
SHA1
49ff4e81041935eaae4939d615cf30a3c2c82ec0
-
SHA256
0cea31036a4216e9844bd9e1ba7ce4835bf0d751a640a797610312bfdf576a45
-
SHA512
fcf7347b3569adc1726558a423840d9295564c4fc0e03a1d64b6a3e0c3025c26c8fda03dfd39ddca0e34a7fcab30c25911e9869e034783ce0514618e2ee8c315
-
SSDEEP
12288:P4zBM0gQXkCxbnuKpE9up3KgZUhcvQwhKf0LCXyxk1NoyH:OkC1uhup3KmUhcvQyKsLxxkroyH
Malware Config
Signatures
Files
-
0cea31036a4216e9844bd9e1ba7ce4835bf0d751a640a797610312bfdf576a45.exe windows x86
eaa8fcb74b619e15ad8851a50d9d8b33
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
RaiseException
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
SetLastError
MultiByteToWideChar
ReadFile
CreateFileW
InitializeCriticalSection
DeleteCriticalSection
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
FreeLibrary
LoadLibraryExW
SetFileTime
SetFileAttributesW
GetFileAttributesW
GetFileTime
MoveFileExW
LocalFree
LocalLock
FormatMessageW
WriteFile
SetFilePointerEx
SetEndOfFile
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GetACP
GetFileSizeEx
lstrcpyW
SetEnvironmentVariableA
CreateThread
FlushFileBuffers
CreateFileA
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
SetFilePointer
GetSystemTimeAsFileTime
CreateDirectoryW
GetCommandLineW
GetModuleHandleW
CloseHandle
GetFullPathNameW
SetCurrentDirectoryW
DeleteFileW
lstrlenW
GetDriveTypeW
GetModuleFileNameW
GetProcAddress
FindResourceExW
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
GetModuleHandleA
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
ExitProcess
LCMapStringW
HeapCreate
CompareStringW
IsValidCodePage
GetOEMCP
GetCPInfo
GetModuleFileNameA
GetStdHandle
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoW
FindResourceW
LoadResource
LockResource
CompareStringA
SizeofResource
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
user32
EnableWindow
EndDialog
GetWindowLongW
CreateDialogParamW
CharNextW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
CallWindowProcW
DefWindowProcW
GetActiveWindow
DialogBoxParamW
PostQuitMessage
GetParent
ShowWindow
DestroyWindow
BeginPaint
EndPaint
KillTimer
LoadStringW
wsprintfW
MessageBoxW
GetDlgItemTextW
SetActiveWindow
IsDialogMessageW
SetTimer
MoveWindow
SetWindowLongW
SetDlgItemTextW
SetWindowTextW
GetSystemMetrics
LoadImageW
PostMessageW
GetDlgItem
SendMessageW
GetWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
GetClientRect
UnregisterClassA
SetWindowPos
MapWindowPoints
gdi32
SelectObject
Rectangle
GetStockObject
advapi32
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
shell32
SHGetSpecialFolderPathW
CommandLineToArgvW
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteExW
ShellExecuteW
ole32
CoInitialize
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
oleaut32
VarUI4FromStr
SysAllocString
SysStringByteLen
SysFreeString
shlwapi
PathFindExtensionW
PathGetDriveNumberW
PathIsUNCW
PathFileExistsW
PathAddBackslashW
comctl32
DestroyPropertySheetPage
CreatePropertySheetPageW
PropertySheetW
InitCommonControlsEx
Sections
.text Size: 242KB - Virtual size: 242KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 202KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ