Static task
static1
Behavioral task
behavioral1
Sample
c704994be9b098e8e4c4746c09acf63bd72d1eecda0227b71d368b4741da5e66.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c704994be9b098e8e4c4746c09acf63bd72d1eecda0227b71d368b4741da5e66.exe
Resource
win10v2004-20220812-en
General
-
Target
c704994be9b098e8e4c4746c09acf63bd72d1eecda0227b71d368b4741da5e66
-
Size
296KB
-
MD5
fc069de9b61d63798d3c63ca2d687cc7
-
SHA1
8293a2e7a51c06ddead35cf2c546054e34ec7f17
-
SHA256
c704994be9b098e8e4c4746c09acf63bd72d1eecda0227b71d368b4741da5e66
-
SHA512
327d742a0b9321946656931cfa3e623518e992e381794610dac0c9cf3d255d1252a83a8bd52cbcd4f4bc685efbfbb59b2df983b94b152afdee8e89c380f578ec
-
SSDEEP
6144:8Ztf75nc3JDG7ZxrvoergA4DuabvXBND2HMYNWj2KB:8Zd5/7Zx8esxvbXPuQKa
Malware Config
Signatures
Files
-
c704994be9b098e8e4c4746c09acf63bd72d1eecda0227b71d368b4741da5e66.exe windows x86
763336867dfe35664f86fa6d7275c041
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoTaskMemRealloc
CoInitialize
CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
ProgIDFromCLSID
CoUninitialize
StringFromGUID2
CoCreateInstance
CLSIDFromProgID
kernel32
LockFileEx
FormatMessageW
GetFileTime
IsProcessorFeaturePresent
WriteFile
GetSystemInfo
GetComputerNameW
FindClose
CreateSemaphoreW
SetLastError
GetModuleHandleW
OpenProcess
GetFileAttributesExW
RaiseException
GetACP
CreateFileW
GetShortPathNameW
InitializeCriticalSectionAndSpinCount
SetFileTime
GetCurrentThreadId
VirtualAlloc
VirtualFree
GetFileSize
ReleaseSemaphore
MapViewOfFileEx
GetUserDefaultUILanguage
lstrlenW
LocalAlloc
DeleteCriticalSection
LCMapStringW
lstrlenA
UnmapViewOfFile
IsDebuggerPresent
LoadResource
LoadLibraryExW
WaitForSingleObject
lstrcmpiW
SetUnhandledExceptionFilter
WaitForMultipleObjects
ReadFile
GetConsoleMode
SizeofResource
VirtualQuery
FindNextFileW
SetFilePointer
CloseHandle
UnhandledExceptionFilter
CreateFileMappingW
GetFileType
ReleaseMutex
FreeLibrary
WideCharToMultiByte
UnlockFileEx
FindFirstFileW
OpenFileMappingW
GetSystemTimeAsFileTime
SetProcessWorkingSetSize
FindResourceW
GetLongPathNameW
SwitchToThread
GetConsoleOutputCP
MapViewOfFile
lstrcmpA
GetProcessHeap
advapi32
CryptGenRandom
CryptAcquireContextW
RegQueryInfoKeyW
CryptReleaseContext
CryptHashData
CryptCreateHash
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegQueryValueExW
CryptDestroyHash
RegSetValueExW
RegCreateKeyExW
CryptGetHashParam
msports
PortsClassInstaller
ComDBReleasePort
ComDBClaimPort
ComDBGetCurrentPortUsage
ComDBClaimNextFreePort
SerialPortPropPageProvider
ComDBResizeDatabase
ComDBOpen
ComDBClose
ParallelPortPropPageProvider
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 257KB - Virtual size: 10.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ