Static task
static1
Behavioral task
behavioral1
Sample
c2f042cda8bc53c70290eea7bf87e8fea78f852c1b4450b22a066faf95d76dd7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2f042cda8bc53c70290eea7bf87e8fea78f852c1b4450b22a066faf95d76dd7.exe
Resource
win10v2004-20220812-en
General
-
Target
c2f042cda8bc53c70290eea7bf87e8fea78f852c1b4450b22a066faf95d76dd7
-
Size
216KB
-
MD5
ffdde597acf8fbfc4495080e733d45ed
-
SHA1
0eb520a692b0c44fb491a45cbffec191091b24d6
-
SHA256
c2f042cda8bc53c70290eea7bf87e8fea78f852c1b4450b22a066faf95d76dd7
-
SHA512
36a26f0a5544598898b1a0a4fd5f05724516dd7d660590059dc3a94b2535fe4474c3ce11cfe0000be1d0bdea435a17c59dedcbf9abca23d8dbdc1d0c63cb3fd8
-
SSDEEP
3072:FHNxaG5V22UcoLi0P/gIrPJQSzeUG+TONtXFG9oJnTGR1DWxvtvT:FHNxPT2ZcSfbKSyFg9oBTVxp
Malware Config
Signatures
Files
-
c2f042cda8bc53c70290eea7bf87e8fea78f852c1b4450b22a066faf95d76dd7.exe windows x86
95b0a43622647ab01371302631b5f6de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceExA
GetVersionExA
DeleteFileA
GetModuleFileNameA
lstrlenA
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
lstrlenW
CompareStringA
CompareStringW
lstrcmpiA
lstrcmpiW
InterlockedIncrement
InterlockedDecrement
GetEnvironmentVariableA
GetEnvironmentVariableW
GetStringTypeExA
GetStringTypeExW
IsDBCSLeadByte
CreateDirectoryA
SetLastError
FreeLibrary
LoadLibraryExA
GetModuleHandleA
Sleep
MoveFileExA
SetFileAttributesA
CloseHandle
WaitForSingleObject
CreateProcessA
CopyFileA
MoveFileA
FindClose
FindFirstFileA
GetCommandLineA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetSystemDirectoryA
OpenProcess
CreateThread
CreateFileA
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcpynA
ReadFile
SetEvent
OpenEventA
WriteFile
GetConsoleCP
SetFilePointer
FindResourceA
SetConsoleCtrlHandler
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetStdHandle
ExitProcess
HeapCreate
FatalAppExitA
GetCurrentThread
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetConsoleMode
IsValidCodePage
GetOEMCP
GetCPInfo
GetStartupInfoA
LoadResource
LockResource
SizeofResource
GetVersion
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualProtect
IsDebuggerPresent
SetUnhandledExceptionFilter
SetEnvironmentVariableA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetTimeZoneInformation
UnhandledExceptionFilter
TerminateProcess
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
InterlockedCompareExchange
GetProcessHeap
GetLocaleInfoW
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
user32
DefWindowProcA
GetSystemMetrics
LoadImageA
MessageBoxA
GetActiveWindow
CreateDialogParamA
DialogBoxParamA
EndDialog
PostQuitMessage
GetParent
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
IsDialogMessageA
GetDlgItem
GetSystemMenu
SetWindowTextA
PostMessageA
GetWindowLongA
SendMessageA
DestroyWindow
CharNextA
CharUpperW
CharUpperA
CharLowerW
CharLowerA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
ShowWindow
SetWindowLongA
EnableMenuItem
UnregisterClassA
advapi32
RegQueryInfoKeyA
RegOpenKeyA
RegCreateKeyA
RegQueryValueExA
RegEnumKeyExA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
SHGetSpecialFolderPathA
SHGetMalloc
ole32
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
oleaut32
SysFreeString
VarUI4FromStr
shlwapi
PathFileExistsA
PathRemoveFileSpecA
PathAppendA
comctl32
InitCommonControlsEx
Sections
.text Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ