Static task
static1
Behavioral task
behavioral1
Sample
c0474ff004770ff7426883e41af01dd18ee89dbaba5445b7c728cc64513c19ac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c0474ff004770ff7426883e41af01dd18ee89dbaba5445b7c728cc64513c19ac.exe
Resource
win10v2004-20220812-en
General
-
Target
c0474ff004770ff7426883e41af01dd18ee89dbaba5445b7c728cc64513c19ac
-
Size
304KB
-
MD5
a242991a205ba80df60d57bdec5886de
-
SHA1
38ab92f68a3989a7f756b660e93443a9f7a1142e
-
SHA256
c0474ff004770ff7426883e41af01dd18ee89dbaba5445b7c728cc64513c19ac
-
SHA512
05dcd5ebb68ffca86ab76eb93e41c225e9783165ea3ee4d7a35ddfed6454a1211a59dcb5cfcdb9a225d1d54524ff8e5d0de42871d8c0d33ddef8fd53c0b791c7
-
SSDEEP
6144:8IC3V2NWgpZYq3HBPZx16lnAZG2Vmed3r0gGO7ig7wd8h:10VXWPZx0AZ5oG3r0a7ilg
Malware Config
Signatures
Files
-
c0474ff004770ff7426883e41af01dd18ee89dbaba5445b7c728cc64513c19ac.exe windows x86
3fe4b424d4a2c960323fc6d38406feb8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowLongW
EnumDesktopWindows
IsCharAlphaNumericA
IsCharUpperW
ValidateRect
SetWindowTextA
GetThreadDesktop
GetActiveWindow
MoveWindow
ole32
CoEnableCallCancellation
CoRevokeClassObject
OleSetClipboard
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
kernel32
LoadResource
SizeofResource
GetUserDefaultLangID
GlobalHandle
FindResourceExA
LocalAlloc
LocalFree
HeapCreate
GetThreadPriority
GetCurrentThreadId
HeapDestroy
HeapFree
GetStartupInfoA
FreeLibrary
GetProcAddress
LoadLibraryA
Sections
.text Size: 263KB - Virtual size: 263KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ