Static task
static1
Behavioral task
behavioral1
Sample
c79d625459854cafe3ae5d5aaf2756e6f2bf36da05ea8acbf2508aadbc537d5f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c79d625459854cafe3ae5d5aaf2756e6f2bf36da05ea8acbf2508aadbc537d5f.exe
Resource
win10v2004-20221111-en
General
-
Target
c79d625459854cafe3ae5d5aaf2756e6f2bf36da05ea8acbf2508aadbc537d5f
-
Size
208KB
-
MD5
4737638361b24356450b49d4e313cd6d
-
SHA1
b41a8c58baad8394ca223fab9ed0fee42ca005d1
-
SHA256
c79d625459854cafe3ae5d5aaf2756e6f2bf36da05ea8acbf2508aadbc537d5f
-
SHA512
c8a409f3bbc0ba8dfe81cbc00d6d072637197624bb31d7103c61c2c8abcbb2d5a5d210dd4de97ace249814d492a8582cdf9d0f916bda014d0c204fa6ad5832d5
-
SSDEEP
6144:T+qmi2BSOpXjXg99l49a6nvXyBhclVmk91MMmN:aqm+Opzg99yAJhclQmv2
Malware Config
Signatures
Files
-
c79d625459854cafe3ae5d5aaf2756e6f2bf36da05ea8acbf2508aadbc537d5f.exe windows x86
a43e6569f904fe20078a4333ebe7da3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowThreadProcessId
CreateDialogIndirectParamA
GetForegroundWindow
GetSysColorBrush
GetClientRect
CreatePopupMenu
DialogBoxIndirectParamA
GetWindowRect
ole32
CLSIDFromString
CoInitialize
OleInitialize
OleSetContainedObject
CoCreateInstance
loadperf
InstallPerfDllA
UnloadPerfCounterTextStringsA
lz32
LZStart
CopyLZFile
LZOpenFileA
LZRead
LZClose
LZDone
LZInit
LZSeek
kernel32
TlsGetValue
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetTimeZoneInformation
VirtualQuery
InterlockedExchange
HeapSize
InitializeCriticalSection
GetOEMCP
GetACP
RtlUnwind
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCPInfo
GetDateFormatA
GetTimeFormatA
GetProfileStringW
VirtualProtect
LoadLibraryA
LoadLibraryExA
GetSystemInfo
ExpandEnvironmentStringsA
GetVolumeInformationA
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
GetCurrentThreadId
GetLastError
GetCurrentThread
TlsFree
TlsSetValue
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE