Static task
static1
Behavioral task
behavioral1
Sample
c5cffa21cd4ab1562c406a9ff22c70d09839339116684a41f376175fe346f372.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c5cffa21cd4ab1562c406a9ff22c70d09839339116684a41f376175fe346f372.exe
Resource
win10v2004-20220812-en
General
-
Target
c5cffa21cd4ab1562c406a9ff22c70d09839339116684a41f376175fe346f372
-
Size
64KB
-
MD5
bb13d50f29b59d4744c830b6d9880c71
-
SHA1
65aa735425e039face3cfd8fbc12ba35d0495b9d
-
SHA256
c5cffa21cd4ab1562c406a9ff22c70d09839339116684a41f376175fe346f372
-
SHA512
ad218e3bf69351a96c26333610e65e0f140b8f6a899a1bc700c8b12458c48cf462576313504094a242f2bb52a5857edabe25eb4e07943782d755c67b37f2c878
-
SSDEEP
1536:657Xd1t1850qtdDcP5rIeLpA2Go18v3udAvxQEfe03+:6Zt1Tq0qvWlzPGo18ve8xQE20u
Malware Config
Signatures
Files
-
c5cffa21cd4ab1562c406a9ff22c70d09839339116684a41f376175fe346f372.exe windows x86
7ed6eaaad00f9c6711edae590c65a3ae
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_onexit
_lock
__dllonexit
_unlock
_amsg_exit
_initterm
free
malloc
_XcptFilter
_vsnwprintf
_purecall
memcpy
memset
user32
GetDC
GetDesktopWindow
IsRectEmpty
ReleaseDC
CreateWindowExW
GetWindowDC
UserLpkPSMTextOut
IsDlgButtonChecked
DdeUnaccessData
GetGUIThreadInfo
ToAsciiEx
OffsetRect
GetInternalWindowPos
TranslateAcceleratorA
SetSystemMenu
SetPropA
GetWindowTextW
DeregisterShellHookWindow
UserRealizePalette
ShowScrollBar
SetPropW
DdeGetData
CreateWindowStationA
EndDeferWindowPos
FindWindowA
UpdatePerUserSystemParameters
ActivateKeyboardLayout
GetClipboardData
MapVirtualKeyExA
UnlockWindowStation
GetUserObjectInformationA
wvsprintfA
LoadLocalFonts
CreatePopupMenu
SetLayeredWindowAttributes
CharLowerBuffA
GetKeyState
GetMessageExtraInfo
InvalidateRgn
GetMonitorInfoW
GetRawInputBuffer
PostMessageA
GetLastActivePopup
SetClassLongW
DragDetect
HideCaret
MsgWaitForMultipleObjects
GetWindowModuleFileNameA
ValidateRect
SetCursor
CreateIcon
SetClassWord
EnableScrollBar
PostQuitMessage
CopyIcon
EnumDisplayDevicesA
BuildReasonArray
gdi32
GetSystemPaletteEntries
kernel32
GetSystemInfo
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
DelayLoadFailureHook
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
RtlUnwind
Sleep
InterlockedExchange
GetModuleFileNameA
InterlockedIncrement
InterlockedCompareExchange
FreeLibrary
InitializeCriticalSection
QueryPerformanceCounter
DeleteCriticalSection
LoadLibraryA
GetProcAddress
GetVersionExW
LeaveCriticalSection
GetVersion
InterlockedDecrement
TerminateProcess
EnterCriticalSection
VirtualAllocEx
ole32
CoTaskMemFree
CoTaskMemAlloc
advapi32
RegOpenKeyW
RegCloseKey
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableFlags
GetTraceEnableLevel
TraceEvent
RegQueryValueExW
RegSetValueA
RegSetValueExA
RegCreateKeyW
RegOpenKeyExW
RegSetValueExW
msdmo
MoInitMediaType
DMORegister
MoCopyMediaType
MoFreeMediaType
DMOUnregister
winmm
mciSetYieldProc
waveInOpen
mmioInstallIOProcW
waveOutSetPitch
midiInMessage
midiOutPrepareHeader
mmioDescend
midiInGetID
midiInStart
midiOutCachePatches
CloseDriver
midiStreamClose
timeBeginPeriod
auxOutMessage
joyGetPosEx
auxSetVolume
mixerMessage
waveInPrepareHeader
mciSendStringW
waveInStop
waveOutGetDevCapsW
mciGetDeviceIDFromElementIDW
midiOutGetVolume
midiConnect
midiOutGetID
mixerGetLineInfoW
mixerGetDevCapsW
mmGetCurrentTask
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ