Static task
static1
Behavioral task
behavioral1
Sample
c86a787f56d23b20c0cc169d6b973ee0d7e27451d0c3dcbee8dd1a8d125bb696.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c86a787f56d23b20c0cc169d6b973ee0d7e27451d0c3dcbee8dd1a8d125bb696.exe
Resource
win10v2004-20220901-en
General
-
Target
c86a787f56d23b20c0cc169d6b973ee0d7e27451d0c3dcbee8dd1a8d125bb696
-
Size
16KB
-
MD5
bc78ee9b9df55ec205234a712363346b
-
SHA1
fcee75fdcad45bcecabce6a08e04efd183c40a47
-
SHA256
c86a787f56d23b20c0cc169d6b973ee0d7e27451d0c3dcbee8dd1a8d125bb696
-
SHA512
c4e27dd468d99b39d9cfb7df934cc4d0bdfff8c68a8375c5cd63a60e5936b13321c4ff02a3b5706afa01b877c64c5af7b383ebbf9018f0234bc4770c198b3ceb
-
SSDEEP
384:sXqxi36gN1QAsFhZmLXhknj/lAUXNPWYnnWt7K:sXKE6gTNehoLOnjNA0PWYW
Malware Config
Signatures
Files
-
c86a787f56d23b20c0cc169d6b973ee0d7e27451d0c3dcbee8dd1a8d125bb696.exe windows x86
0b80c23f8d6888487770dfccff34b18f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
crtdll
memset
strlen
sprintf
strcmp
strncmp
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetCurrentThreadId
GetCurrentProcessId
HeapAlloc
HeapFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
user32
MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows
GetWindowTextLengthA
GetWindowTextA
SetFocus
CreateWindowExA
GetSysColor
GetSysColorBrush
SetWindowLongA
GetWindowLongA
PostMessageA
CallWindowProcA
SendMessageA
DestroyWindow
RedrawWindow
RemovePropA
DefWindowProcA
SetPropA
GetParent
GetPropA
GetWindow
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
PeekMessageA
MsgWaitForMultipleObjects
GetMessageA
GetActiveWindow
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
RegisterClassA
AdjustWindowRect
GetSystemMetrics
GetWindowRect
ShowWindow
CreateAcceleratorTableA
SetCursorPos
LoadImageA
SetCursor
SystemParametersInfoA
GetKeyState
SetCapture
GetCursorPos
MapWindowPoints
ReleaseCapture
MoveWindow
GetFocus
IsChild
GetClassNameA
EnumChildWindows
GetClientRect
FillRect
gdi32
GetStockObject
SetTextColor
SetBkColor
CreateSolidBrush
DeleteObject
comctl32
InitCommonControls
InitCommonControlsEx
ole32
CoInitialize
RevokeDragDrop
Sections
.code Size: 1024B - Virtual size: 587B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flat Size: 512B - Virtual size: 45B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE