Static task
static1
Behavioral task
behavioral1
Sample
c3c2676325112b6f1a1f21cea03ef7b5117bfc2ccbdf66eb9f2c99b9223a5e5b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c3c2676325112b6f1a1f21cea03ef7b5117bfc2ccbdf66eb9f2c99b9223a5e5b.exe
Resource
win10v2004-20220812-en
General
-
Target
c3c2676325112b6f1a1f21cea03ef7b5117bfc2ccbdf66eb9f2c99b9223a5e5b
-
Size
53KB
-
MD5
c8cee2833650b1ab0a60f86242fd9971
-
SHA1
7d17c2c341ba8d97ae51a4592415d414e1291253
-
SHA256
c3c2676325112b6f1a1f21cea03ef7b5117bfc2ccbdf66eb9f2c99b9223a5e5b
-
SHA512
466779fbf9b0189618a93756f3ca8871f93f0f6458a7550b324128de6e11d8b67d769d73d7af0eafb6e55f00e658056cc1ae620a468bfb18b720bfeeed5b9759
-
SSDEEP
768:8OGowNy61MpMMQc7f9L8M5pi9MrAHTyR24lLjKEB4xzd:82wNy+jKzjiWYm3KfxZ
Malware Config
Signatures
Files
-
c3c2676325112b6f1a1f21cea03ef7b5117bfc2ccbdf66eb9f2c99b9223a5e5b.exe windows x86
dfd2db07312f2fcba732cf9ec9c8912f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlZeroMemory
Sleep
RtlCaptureStackBackTrace
RtlUnwind
RtlCaptureContext
ExitProcess
LocalSize
RtlMoveMemory
RtlFillMemory
FreeLibrary
VerSetConditionMask
user32
RegisterShellHookWindow
MessageBoxA
IsIconic
EndTask
GetAncestor
comctl32
ImageList_Add
gdiplus
GdipGetAdjustableArrowCapFillState
GdipSetAdjustableArrowCapWidth
gdi32
CreateEllipticRgn
EnumFontFamiliesExA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 774B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ