Static task
static1
Behavioral task
behavioral1
Sample
c965d5a67e63c07c35680c182e53370f2de75af1239107ee2c674af863fbde75.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c965d5a67e63c07c35680c182e53370f2de75af1239107ee2c674af863fbde75.exe
Resource
win10v2004-20220812-en
General
-
Target
c965d5a67e63c07c35680c182e53370f2de75af1239107ee2c674af863fbde75
-
Size
53KB
-
MD5
eec8c830d03033d379c6f333236efd51
-
SHA1
271edb1babaa23c6079887dacef655bbf2fc8401
-
SHA256
c965d5a67e63c07c35680c182e53370f2de75af1239107ee2c674af863fbde75
-
SHA512
9c2730e66061afd81e1242dd4bd8c5eb5f31c6ed8288fb1f6b1f155a811b0f6e374c72e292173b2faabbcc368656d9288be63e941f36dc2eb6ef1b592a4812ab
-
SSDEEP
768:boEVwusVCiZCzI9+ziXJrdU6MG9WldRPI0xZfun7pa3GqvtEwB1GkbzW8RPYKSzW:EgwfpGcr/U6MG0TSGWnglBBWBKSzk8
Malware Config
Signatures
Files
-
c965d5a67e63c07c35680c182e53370f2de75af1239107ee2c674af863fbde75.exe windows x86
0c47360104ffa9fbf7e3299f35b279a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileTime
_lopen
MapViewOfFile
WideCharToMultiByte
FindClose
SetCurrentDirectoryA
GetWindowsDirectoryA
GetLastError
GetFileAttributesA
GlobalAlloc
FileTimeToSystemTime
_lclose
FindNextFileA
GetFileSize
MoveFileA
CopyFileA
WinExec
GetVolumeInformationA
GetCurrentDirectoryA
SystemTimeToFileTime
CloseHandle
GetProcAddress
GetDiskFreeSpaceA
UnmapViewOfFile
MultiByteToWideChar
GlobalUnlock
GetTempFileNameA
GlobalReAlloc
GetFileTime
InterlockedIncrement
GetEnvironmentVariableA
GlobalMemoryStatus
FreeLibrary
GetModuleHandleA
CreateFileMappingA
SetErrorMode
InterlockedExchange
GetModuleFileNameA
WaitForSingleObject
CreateEventA
FindFirstFileA
CreateDirectoryA
DeleteFileA
ReadFile
GetStartupInfoA
GetFullPathNameA
SetFilePointer
GetTempPathA
SetEndOfFile
GlobalLock
GetTickCount
ExitProcess
HeapAlloc
HeapFree
GetProcessHeap
GetCommandLineA
VirtualProtectEx
LoadLibraryExA
SetFileAttributesA
GlobalFree
WriteFile
_hread
GetDriveTypeA
CreateFileA
user32
ReleaseDC
CharLowerBuffA
SendMessageA
GetDesktopWindow
IsWindow
CharNextA
MessageBoxA
GetSystemMetrics
GetClientRect
GetDC
EnableWindow
DrawIcon
LoadIconA
IsIconic
gdi32
GetObjectA
SelectPalette
GetDIBits
RealizePalette
GetStockObject
shell32
SHFileOperationA
msvcrt
fwrite
__set_app_type
atol
atoi
__CxxFrameHandler
_i64toa
sprintf
rand
localtime
_exit
_XcptFilter
strchr
_adjust_fdiv
_strnicmp
__setusermatherr
_acmdln
_onexit
_initterm
memmove
fclose
_setmbcp
_controlfp
__p__fmode
__p__commode
wcslen
time
_purecall
strncmp
__dllonexit
__getmainargs
exit
_ftol
fopen
_except_handler3
_stricmp
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ