Static task
static1
Behavioral task
behavioral1
Sample
c2a3981f25eceb3cfd24cb32d9180ff6ee591f7b4350cf551e2871e29b0efb27.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c2a3981f25eceb3cfd24cb32d9180ff6ee591f7b4350cf551e2871e29b0efb27.exe
Resource
win10v2004-20220901-en
General
-
Target
c2a3981f25eceb3cfd24cb32d9180ff6ee591f7b4350cf551e2871e29b0efb27
-
Size
182KB
-
MD5
5178be216c115745673fc09bca2870d8
-
SHA1
3bcdc0a89266353d989bf026e509d47c66231e63
-
SHA256
c2a3981f25eceb3cfd24cb32d9180ff6ee591f7b4350cf551e2871e29b0efb27
-
SHA512
5bf689fba1dd4d98254fc67aa6727b273fa76919ed34090a88f3201e07d7204d741ac5ca7c8ec4c018fa1551d3f5a252a51643a0ea1c2d1efcdf4d84e0d0d3b8
-
SSDEEP
3072:1X7UnVT3jcUrlwc1pSfkTtA2HV6qwcyUBP90OdsvsEZueTy3IQ97:WnVLTrl51IcTS216qwXcP90Js8E3T7
Malware Config
Signatures
Files
-
c2a3981f25eceb3cfd24cb32d9180ff6ee591f7b4350cf551e2871e29b0efb27.exe windows x86
9d9a82c121cfaeda79a6bd3c7f44f1ed
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
kernel32
GetVersionExA
ExitProcess
SetLastError
WaitForSingleObject
GetModuleHandleA
HeapSetInformation
GlobalFree
DeleteCriticalSection
GetTickCount
MultiByteToWideChar
user32
MoveWindow
InvalidateRect
ShowWindow
DestroyWindow
DefWindowProcA
LoadStringA
LoadStringW
GetWindowRect
CreateDialogParamA
GetDesktopWindow
MessageBoxA
GetActiveWindow
wsprintfA
SetFocus
GetDlgItem
SetWindowLongA
LoadImageA
DialogBoxParamA
GetWindowLongA
SendDlgItemMessageA
EndDialog
gdi32
DeleteObject
advapi32
RegCreateKeyA
RegCloseKey
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
gdiplus
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
ole32
CoFreeUnusedLibraries
CoSetProxyBlanket
ReadClassStg
CoTaskMemAlloc
CreateStreamOnHGlobal
StringFromGUID2
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
Sections
.text Size: 167KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 306B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ