Static task
static1
Behavioral task
behavioral1
Sample
c7091510b891e88cece23dd0310db8bd8f4cf80e3542a30bb666b6c45fb7f4ff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c7091510b891e88cece23dd0310db8bd8f4cf80e3542a30bb666b6c45fb7f4ff.exe
Resource
win10v2004-20220812-en
General
-
Target
c7091510b891e88cece23dd0310db8bd8f4cf80e3542a30bb666b6c45fb7f4ff
-
Size
93KB
-
MD5
b173f231fca6f70124772c71a878a46d
-
SHA1
4e87a219b5cf8eab2c13b0145e7744f5b4d33b6b
-
SHA256
c7091510b891e88cece23dd0310db8bd8f4cf80e3542a30bb666b6c45fb7f4ff
-
SHA512
935be8ca913f3611cba330f791e5a3c28a1a5cba4aad0a4051ba58776c34ed1c8a35d9c50225759cbc5b26e1819245edbf375b4a045a695c50ff6b836f208c97
-
SSDEEP
1536:RUNQaABL541WlqJU5sSkRtXrxiujrpnrYAx4DEQR9ZqffVAcGbjD1UT+UzARw1:RUNQaoW1YRalrxXlr32DEQRAf9GmT+Bi
Malware Config
Signatures
Files
-
c7091510b891e88cece23dd0310db8bd8f4cf80e3542a30bb666b6c45fb7f4ff.exe windows x86
d7c180fb87c497075d69f3988dac5c0e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
atoi
_acmdln
_adjust_fdiv
strcpy
__setusermatherr
__p__fmode
_strnicmp
__set_app_type
strncmp
_exit
strlen
_errno
strrchr
fread
_initterm
__p__commode
fwrite
_except_handler3
fopen
realloc
calloc
__getmainargs
free
strstr
sqrt
comdlg32
GetOpenFileNameA
kernel32
CompareStringW
IsDebuggerPresent
GetStartupInfoA
RemoveDirectoryA
GetLocalTime
GetCommandLineW
VirtualAlloc
FileTimeToSystemTime
InterlockedExchange
SetUnhandledExceptionFilter
InterlockedIncrement
GetNumberFormatA
DeleteFileW
user32
ShowWindow
SetDlgItemTextA
GetWindowLongA
IsRectEmpty
EndDialog
SetClassLongA
GetClassInfoA
GetSysColor
IsWindowEnabled
ole32
CoGetInterfaceAndReleaseStream
CoUninitialize
StringFromIID
GetRunningObjectTable
OleDraw
IsAccelerator
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
OleSetMenuDescriptor
OleRun
CreateItemMoniker
advapi32
RegOpenKeyExW
RevertToSelf
SetSecurityDescriptorDacl
GetTokenInformation
AddAccessAllowedAce
CryptReleaseContext
RegEnumValueA
CryptCreateHash
OpenServiceW
RegCreateKeyExA
RegEnumKeyExA
CryptAcquireContextA
RegQueryValueExW
comctl32
ImageList_SetImageCount
CreatePropertySheetPageW
ImageList_GetImageInfo
InitCommonControls
InitCommonControlsEx
ImageList_SetDragCursorImage
ImageList_LoadImageW
CreatePropertySheetPageA
CreateStatusWindowA
ImageList_Replace
ImageList_Draw
ImageList_Read
ImageList_SetBkColor
ImageList_GetImageCount
DestroyPropertySheetPage
gdi32
ExtTextOutA
GetMetaFileBitsEx
PlayMetaFile
CreateDCW
SetTextAlign
SelectPalette
EnumFontFamiliesExW
RectVisible
Polyline
GetStretchBltMode
EndPath
DeleteMetaFile
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ