Static task
static1
Behavioral task
behavioral1
Sample
c82617d2756bfaff3eae300517907fa6161ecefa69d9aed848ad2de49b5a33e6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c82617d2756bfaff3eae300517907fa6161ecefa69d9aed848ad2de49b5a33e6.exe
Resource
win10v2004-20221111-en
General
-
Target
c82617d2756bfaff3eae300517907fa6161ecefa69d9aed848ad2de49b5a33e6
-
Size
673KB
-
MD5
64350b69e9cbcc6afb03bf7523300e1f
-
SHA1
d0547f0071cc289bf627740b9593b00a989bfd90
-
SHA256
c82617d2756bfaff3eae300517907fa6161ecefa69d9aed848ad2de49b5a33e6
-
SHA512
717ee03c3450d9c9f2103418ae37d406dc408483a069f972d8af4775b77b5a463fde712226d6a9d0ec091a8b58919c22648e882d87fce541930c2365ccbe0976
-
SSDEEP
12288:gI3q2BBYe8Zc+2/4UDiDVPYNXaf5kWGaA2XkdR1GcG0ioUf8gchawlPUpVuB:3q2fnz4g+moGE8R1G/VoUKawJaS
Malware Config
Signatures
Files
-
c82617d2756bfaff3eae300517907fa6161ecefa69d9aed848ad2de49b5a33e6.exe windows x86
752d8a1db7cd8ab247ffba957feef8de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MapWindowPoints
DestroyWindow
DestroyMenu
PostQuitMessage
SetWindowPos
IsWindow
DispatchMessageA
GetDC
GetCursorPos
PtInRect
GetParent
ShowWindow
TranslateMessage
IsWindowEnabled
RegisterClassA
CreateWindowExA
EndPaint
SetFocus
PeekMessageA
BeginPaint
DefWindowProcA
GetSystemMetrics
GetWindowRect
ReleaseCapture
SetWindowLongA
EndDialog
SetWindowTextA
CheckMenuItem
GetDlgItem
ScreenToClient
LoadCursorA
GetDesktopWindow
SetForegroundWindow
FillRect
SetDlgItemTextA
MessageBoxA
GetSysColor
IsWindowVisible
wsprintfA
GetClientRect
CallWindowProcA
oleaut32
SysAllocString
SysFreeString
SysStringLen
kernel32
GetSystemInfo
GetStdHandle
GetConsoleOutputCP
ReleaseMutex
WaitForSingleObject
FindNextFileA
HeapDestroy
GetFileAttributesW
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetLocaleInfoA
LocalAlloc
CreateFileA
SetErrorMode
SetStdHandle
GetTempPathA
WideCharToMultiByte
lstrcmpiA
GetStringTypeA
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
SetFileAttributesA
FreeLibrary
LocalFree
FormatMessageW
InitializeCriticalSection
FindClose
InterlockedDecrement
FormatMessageA
SetLastError
GetModuleFileNameW
IsDebuggerPresent
GetModuleFileNameA
LoadLibraryExA
SetConsoleCtrlHandler
UnhandledExceptionFilter
LoadLibraryExW
MultiByteToWideChar
GetLocalTime
CreateMutexA
CreateThread
SetUnhandledExceptionFilter
GetCurrentThread
GetTickCount
GetVersion
GetModuleHandleA
GetCurrentThreadId
GetCurrentProcessId
GetCommandLineA
ExitProcess
VirtualAlloc
GetLastError
FindResourceA
Sleep
VirtualFree
HeapCreate
IsValidCodePage
SizeofResource
GetModuleHandleW
GlobalLock
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
GetCurrentDirectoryA
LockResource
GetEnvironmentStrings
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GlobalFree
lstrlenA
LCMapStringW
LeaveCriticalSection
HeapAlloc
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
GlobalAlloc
WaitForMultipleObjects
FindFirstFileW
CompareStringA
FindFirstFileA
CompareStringW
GetProcessHeap
GetProcAddress
GetCPInfo
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
IsBadWritePtr
QueryPerformanceCounter
GetOEMCP
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
InterlockedIncrement
SetEndOfFile
GetConsoleMode
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
Sections
.text Size: 637KB - Virtual size: 963KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ