Static task
static1
Behavioral task
behavioral1
Sample
c0f52910882c62dc05388c680202b3ca2495ddd0f3e96339d8f5153b8e224ef8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c0f52910882c62dc05388c680202b3ca2495ddd0f3e96339d8f5153b8e224ef8.exe
Resource
win10v2004-20220901-en
General
-
Target
c0f52910882c62dc05388c680202b3ca2495ddd0f3e96339d8f5153b8e224ef8
-
Size
748KB
-
MD5
5bb952ebcd6524f615339f1aaf3ef454
-
SHA1
99b000ab264d22c26299c4809af205cbccc09afc
-
SHA256
c0f52910882c62dc05388c680202b3ca2495ddd0f3e96339d8f5153b8e224ef8
-
SHA512
580405f35c1fc21c56aeef5db191bc1ab92df580f516c5fc72e534ecde3ec2fe06a75d3203fb9eefb506334a3b215c486138919285563ab9bd8826369b0e945a
-
SSDEEP
12288:p+TyHiXcNZQT/TYTCmVfScAQPyZ4A/byqAcF1Bf9PE5rG6bEbExjptm3vDIoNi9+:pIT/vwSpQPhA/Yc1Bd56RluHi9kie
Malware Config
Signatures
Files
-
c0f52910882c62dc05388c680202b3ca2495ddd0f3e96339d8f5153b8e224ef8.exe windows x86
9eaf507f35950059e03270d84d93e868
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
malloc
free
memcpy
fopen
fread
fwrite
ftell
fseek
fclose
ferror
time
srand
rand
_strnicmp
strncmp
strncpy
_strdup
strcmp
memmove
strlen
strcpy
strcat
sprintf
fabs
ceil
floor
localtime
mktime
gmtime
kernel32
GetModuleHandleA
HeapCreate
IsDebuggerPresent
HeapDestroy
ExitProcess
LoadLibraryA
FindResourceA
LoadResource
SizeofResource
LockResource
FreeLibrary
SetFileAttributesA
CreateFileA
SetFileTime
CloseHandle
SystemTimeToFileTime
LocalFileTimeToFileTime
HeapAlloc
HeapFree
GetCurrentThreadId
GetCurrentProcessId
InitializeCriticalSection
GetModuleFileNameA
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
CreateProcessA
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
GetEnvironmentVariableA
SetEnvironmentVariableA
SetUnhandledExceptionFilter
Sleep
GetTickCount
GetVersionExA
SetLastError
TlsAlloc
GlobalAlloc
GlobalFree
GetProcAddress
GetDriveTypeA
FindFirstFileA
FindClose
GetFileAttributesA
FindNextFileA
DeleteFileA
RemoveDirectoryA
GetTempPathA
CreateDirectoryA
GetLastError
GetLocalTime
WriteFile
ReadFile
SetFilePointer
GetFileSize
HeapReAlloc
comctl32
InitCommonControls
InitCommonControlsEx
user32
OemToCharA
CharLowerA
MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows
DestroyWindow
SendMessageA
GetWindowRect
ScreenToClient
RedrawWindow
GetWindowLongA
GetIconInfo
SetWindowPos
InvalidateRect
UpdateWindow
ReleaseCapture
BeginPaint
DrawStateA
EndPaint
SetCapture
CallWindowProcA
GetSystemMetrics
CreateWindowExA
SetWindowLongA
GetSysColor
GetSysColorBrush
SetFocus
GetWindowTextLengthA
GetWindowTextA
RemovePropA
DefWindowProcA
SetPropA
GetParent
GetPropA
GetWindow
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
LoadCursorA
RegisterClassA
AdjustWindowRectEx
GetActiveWindow
ShowWindow
CreateAcceleratorTableA
IsZoomed
IsIconic
PeekMessageA
MsgWaitForMultipleObjects
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
SetCursorPos
LoadImageA
SetCursor
MapWindowPoints
MoveWindow
SystemParametersInfoA
GetKeyState
PostMessageA
GetCursorPos
GetFocus
GetClientRect
FillRect
EnumChildWindows
DefFrameProcA
IsChild
GetClassNameA
DestroyIcon
CreateIconFromResourceEx
CreateIconFromResource
gdi32
GetStockObject
GetObjectType
GetObjectA
DeleteObject
SetBkColor
SetTextColor
CreateSolidBrush
CreateCompatibleDC
SetDIBits
DeleteDC
CreateDIBSection
GetDIBits
SelectObject
BitBlt
CreateBitmap
SetPixel
imagehlp
MakeSureDirectoryPathExists
ole32
CoInitialize
RevokeDragDrop
shell32
ShellExecuteExA
winmm
timeBeginPeriod
timeEndPeriod
Sections
.code Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 622KB - Virtual size: 622KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ