Static task
static1
Behavioral task
behavioral1
Sample
c04ca721a6bf96ec7f4aae4f405bd63adf58d10c33989b82d1b60557721bea8b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c04ca721a6bf96ec7f4aae4f405bd63adf58d10c33989b82d1b60557721bea8b.exe
Resource
win10v2004-20220812-en
General
-
Target
c04ca721a6bf96ec7f4aae4f405bd63adf58d10c33989b82d1b60557721bea8b
-
Size
598KB
-
MD5
fcc6a53548c379d408a43736a0c6b313
-
SHA1
bf903928ae584576310ad08aaeeb455fe4e05999
-
SHA256
c04ca721a6bf96ec7f4aae4f405bd63adf58d10c33989b82d1b60557721bea8b
-
SHA512
e1542a85635d3582046aa2eaca8bdbc795d54690546d3cd5afd845555841a9244ca236174210fff1666e248228a26929db329d965a577871fb1b364011073f24
-
SSDEEP
12288:NMcaLaqWdPYsBAUmZIn8THF4K5/6MHlasLPgGNCFnsrih75gidin/XK3Zhiw:NTmIQsBAjZIn29Hlj9s99gidEKp8w
Malware Config
Signatures
Files
-
c04ca721a6bf96ec7f4aae4f405bd63adf58d10c33989b82d1b60557721bea8b.exe windows x86
1bfa7d6429b91359741dd0f5d5dcc915
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetActiveWindow
GetProcessWindowStation
IsCharUpperW
ValidateRect
SetWindowTextA
EnumDesktopsA
SetClassLongA
SetWindowRgn
IsCharAlphaNumericA
ole32
CoRevokeClassObject
IIDFromString
kernel32
GetCurrentProcessId
GetStartupInfoA
SizeofResource
HeapDestroy
GlobalFlags
SetFileAttributesA
HeapFree
LocalAlloc
LocalFree
HeapCreate
HeapAlloc
GetSystemPowerStatus
LoadLibraryA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress
Sections
.text Size: 584KB - Virtual size: 583KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ