Static task
static1
Behavioral task
behavioral1
Sample
0c506dfc8e458c39a09598a887b68f532eab0bae6b9405d92dbce6302fc06a2e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0c506dfc8e458c39a09598a887b68f532eab0bae6b9405d92dbce6302fc06a2e.exe
Resource
win10v2004-20220812-en
General
-
Target
0c506dfc8e458c39a09598a887b68f532eab0bae6b9405d92dbce6302fc06a2e
-
Size
150KB
-
MD5
0e621f11d947fa559fea9321d6dcbdd0
-
SHA1
c8096bdec702a17a8cb28e156fc9298baa61896a
-
SHA256
0c506dfc8e458c39a09598a887b68f532eab0bae6b9405d92dbce6302fc06a2e
-
SHA512
e24bcfc752ff247568807a2a5ecf91347a0495236706c8160072263d89a7eb041fa41b5d307987025027a220562628a8b4be2dd9c6dfbb9d646ac3cb3115c5ac
-
SSDEEP
3072:E9srmJ4O/bjFiUkWlEHOAY8+yreZlnN2vd8HNasJ1o:/mJ4aiUBxiqtN2vd8HD1o
Malware Config
Signatures
Files
-
0c506dfc8e458c39a09598a887b68f532eab0bae6b9405d92dbce6302fc06a2e.exe windows x86
72ef4d107523ae79eb63a062af888cda
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptBinaryToStringW
user32
FindWindowA
FindWindowW
GetDC
GetWindowRect
ReleaseDC
SetFocus
UnhookWindowsHook
wsprintfA
DialogBoxParamA
kernel32
CloseHandle
CreateEventA
CreateEventW
CreateFileA
ExitProcess
FindClose
FindFirstFileW
FindNextFileW
FreeLibrary
GetDriveTypeA
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetSystemDirectoryA
GetTickCount
GetVersionExA
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
UnhandledExceptionFilter
VirtualProtect
WideCharToMultiByte
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrlenA
GetACP
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
Sections
AUTO Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ