Static task
static1
Behavioral task
behavioral1
Sample
c1fb66542bee5c968684f9f45322d824381944e2154e150c26d773b58534733d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c1fb66542bee5c968684f9f45322d824381944e2154e150c26d773b58534733d.exe
Resource
win10v2004-20221111-en
General
-
Target
c1fb66542bee5c968684f9f45322d824381944e2154e150c26d773b58534733d
-
Size
747KB
-
MD5
8af1d5b2db44c617be047b01fb2a1704
-
SHA1
6e0ad287dab33177d6d4b099c0903e39c90a0034
-
SHA256
c1fb66542bee5c968684f9f45322d824381944e2154e150c26d773b58534733d
-
SHA512
69926078d86ff7aedc9f395d78bc443810d4befab9f7c32522bbfbb691a7b6267ed5d7349b6789a916d734b0f49e60c311ad6aaa7a4099d4149bfec387b2d1a0
-
SSDEEP
12288:EXqSuTR3KRrWdtdJPgME1M8b8Rsz0IjulRbExG3sz/w7r82iL2TXE:jTlKRrWTbP9EHwRsznyzwKs+j4IX
Malware Config
Signatures
Files
-
c1fb66542bee5c968684f9f45322d824381944e2154e150c26d773b58534733d.exe windows x86
e36e393b98d81dfd54981920b2e073f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
ExitProcess
OpenProcess
ClearCommBreak
CancelIo
SetEvent
HeapSize
RemoveDirectoryA
GetStartupInfoW
ResetEvent
CreateFileA
SetLastError
ReleaseMutex
WriteConsoleW
GetCommandLineW
CreateMutexA
GetEnvironmentVariableW
VirtualAllocEx
GetModuleHandleA
GetFileAttributesA
GetTickCount
user32
GetDC
GetDC
FillRect
GetDC
GetClassInfoA
DispatchMessageW
GetWindowLongA
GetSysColor
CallWindowProcW
DispatchMessageW
PeekMessageA
FindWindowA
GetCursorInfo
lpk
LpkExtTextOut
LpkExtTextOut
LpkExtTextOut
LpkExtTextOut
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 741KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ