Static task
static1
Behavioral task
behavioral1
Sample
c0536e718dec431edc16071816f2a0a79532a24f65a73764451ee72314223bdf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c0536e718dec431edc16071816f2a0a79532a24f65a73764451ee72314223bdf.exe
Resource
win10v2004-20221111-en
General
-
Target
c0536e718dec431edc16071816f2a0a79532a24f65a73764451ee72314223bdf
-
Size
92KB
-
MD5
2b599052cf5a0ff496a298e4fd9f7e10
-
SHA1
8fe98afdcd283c558ba777c63398ef4f34a9177a
-
SHA256
c0536e718dec431edc16071816f2a0a79532a24f65a73764451ee72314223bdf
-
SHA512
0f98826b90d0ae8d7917420fb503a5b127bb770fa12271b6bee130af081bf1b78041420fa0f9d01a42611780e8c2779f8628234d4035f75ccf8c2e8b56796c87
-
SSDEEP
1536:lH6hcu0Ai53xtAlcboFfXibapcHnv5Y3pZzmMrV8Ri2U/4lRzA5tgN0DlgEcJdWk:lH66u0A4xt/kFfXi2pW4pZzmMrVYq4l/
Malware Config
Signatures
Files
-
c0536e718dec431edc16071816f2a0a79532a24f65a73764451ee72314223bdf.exe windows x86
e76ec5e4b618200b8c47d332891640ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
WideCharToMultiByte
GetModuleHandleW
GlobalAlloc
CancelWaitableTimer
WritePrivateProfileStringW
GlobalDeleteAtom
GetFileAttributesExW
DeleteFileW
VirtualAlloc
ResetEvent
SetEndOfFile
MulDiv
CreateWaitableTimerW
LoadLibraryA
SuspendThread
QueryDosDeviceW
Sleep
CreateThread
GetProcAddress
FindFirstFileW
CreateFileW
ResumeThread
GetCurrentThread
MultiByteToWideChar
ReadFile
SetEvent
SetCurrentDirectoryW
GetLocalTime
user32
LoadBitmapW
GetParent
PostQuitMessage
GetWindowThreadProcessId
GetMessageW
SetCursor
SetForegroundWindow
ReleaseDC
LoadStringW
TranslateMessage
AppendMenuW
WindowFromPoint
RegisterWindowMessageW
FillRect
MessageBoxW
SystemParametersInfoW
GetWindowTextW
ReleaseCapture
gdi32
DeleteObject
GetClipBox
LineTo
GetDeviceCaps
SetMapMode
CreateDCW
SetTextColor
CreateICW
SetBkMode
SelectObject
DeleteDC
StretchBlt
advapi32
GetUserNameW
LookupPrivilegeValueW
Sections
.cfug Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nnfnid Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tjios Size: 4KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE