Static task
static1
Behavioral task
behavioral1
Sample
c0d7cc839e08a9ad34624d5882a89043fbc695fc0995aec3e7e067dbd85e85cb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c0d7cc839e08a9ad34624d5882a89043fbc695fc0995aec3e7e067dbd85e85cb.exe
Resource
win10v2004-20221111-en
General
-
Target
c0d7cc839e08a9ad34624d5882a89043fbc695fc0995aec3e7e067dbd85e85cb
-
Size
280KB
-
MD5
3679ed69daf1787f0f81b050e0fef625
-
SHA1
3072a5dfd48cd041b38d6d492a8d275902147976
-
SHA256
c0d7cc839e08a9ad34624d5882a89043fbc695fc0995aec3e7e067dbd85e85cb
-
SHA512
9f8b1bf0f5c4d4716887bb59972c5c900a5443d57e3e9e4335e05ea30480ff7918a169f26f4a384b65256a4b4fada14698b17dd3ccbfa46cfa45b006b5591376
-
SSDEEP
6144:UY0QONItwCUwABPkHzqzWBzHK9KJtTDmZRFzSiORy:+IqXyTLloEtTCRzFOA
Malware Config
Signatures
Files
-
c0d7cc839e08a9ad34624d5882a89043fbc695fc0995aec3e7e067dbd85e85cb.exe windows x86
aabee31064d2ae83e08ce2628302e8d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetActiveWindow
IsCharAlphaNumericA
GetThreadDesktop
EnumDesktopWindows
IsCharUpperW
SetClassLongA
SetWindowRgn
SetWindowTextA
ole32
CoRevokeClassObject
OleSetClipboard
IIDFromString
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
kernel32
LoadResource
SizeofResource
LocalAlloc
GetStartupInfoA
FindResourceExW
HeapDestroy
HeapCreate
GetThreadContext
GlobalHandle
SetFileAttributesA
HeapFree
LocalFree
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress
LoadLibraryA
Sections
.text Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ