Static task
static1
Behavioral task
behavioral1
Sample
c15d8a792dc911577ea4d4c53c2b52a0f917ac6c26c5f9d8f699358fb0a2bc4d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c15d8a792dc911577ea4d4c53c2b52a0f917ac6c26c5f9d8f699358fb0a2bc4d.exe
Resource
win10v2004-20220812-en
General
-
Target
c15d8a792dc911577ea4d4c53c2b52a0f917ac6c26c5f9d8f699358fb0a2bc4d
-
Size
159KB
-
MD5
ae56774e5df82c5a809d5e2c62365531
-
SHA1
4ceb5d83274cb680c49977fd517341865338361c
-
SHA256
c15d8a792dc911577ea4d4c53c2b52a0f917ac6c26c5f9d8f699358fb0a2bc4d
-
SHA512
30b0eab61875fa30014684662c98b54d66fd8253c75693bbfa296d92f0643e3463ee9a709420abab8f2bf2da18702925f4bb9aadefd4787b96819f574cec0ac8
-
SSDEEP
3072:bJHJniDKQ/c239JyiQiqp5gFygJi2wBmyUrCi41XZVKfZjJ84:b+/ci9r8gJ4BmyKshbUjJ9
Malware Config
Signatures
Files
-
c15d8a792dc911577ea4d4c53c2b52a0f917ac6c26c5f9d8f699358fb0a2bc4d.exe windows x86
1ee4f99cd3ae66679f53228ac91b5beb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMenuItemInfoA
GetWindowTextA
DrawMenuBar
CharLowerA
GetForegroundWindow
GetParent
GetScrollRange
FillRect
CharLowerBuffA
GetSysColorBrush
CreateMenu
GetIconInfo
GetMenuState
comctl32
ImageList_Destroy
ImageList_GetBkColor
ImageList_Add
ImageList_DrawEx
ImageList_DragShowNolock
ImageList_Read
ImageList_Draw
ImageList_Create
ImageList_Remove
comdlg32
GetFileTitleA
shell32
SHGetDiskFreeSpaceA
SHGetSpecialFolderLocation
SHGetFileInfoA
kernel32
ExitThread
GetProcessHeap
GetModuleHandleA
GetCurrentProcess
FreeResource
GetFileAttributesA
LoadLibraryExA
GetThreadLocale
CreateEventA
GetVersionExA
VirtualAllocEx
LoadLibraryA
shlwapi
SHQueryValueExA
SHEnumValueA
PathFileExistsA
ole32
CreateOleAdviseHolder
CoCreateInstanceEx
msvcrt
memcpy
memmove
tan
strlen
malloc
gdi32
GetRgnBox
oleaut32
GetErrorInfo
SysFreeString
SafeArrayGetUBound
SysReAllocStringLen
SafeArrayUnaccessData
VariantCopyInd
OleLoadPicture
SysAllocStringLen
advapi32
RegCreateKeyA
RegQueryValueExA
version
VerQueryValueA
VerInstallFileA
VerFindFileA
Sections
CODE Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 119KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ