Static task
static1
Behavioral task
behavioral1
Sample
c75240360960e230ef69520757811f8eab02899acbe3b672e7b0004de253fd13.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c75240360960e230ef69520757811f8eab02899acbe3b672e7b0004de253fd13.exe
Resource
win10v2004-20221111-en
General
-
Target
c75240360960e230ef69520757811f8eab02899acbe3b672e7b0004de253fd13
-
Size
312KB
-
MD5
a8eb633aff2eb00e1358c0e6361ad155
-
SHA1
a758567c4a36a44dec9766aa55ca6e95a5443920
-
SHA256
c75240360960e230ef69520757811f8eab02899acbe3b672e7b0004de253fd13
-
SHA512
146cf53625a86aaf0600267fe3ccee645b63d035989d1ebda7696daa6a30fae8b5482f46386900c94c005472334d71800ace4ea98efbd70205f448dc5b2fa342
-
SSDEEP
6144:iqZ8sR90G783B2lxiAnp+uHgryKghEp2rFZLIq8EX:R8l3gxi60uMgh++FZMbEX
Malware Config
Signatures
Files
-
c75240360960e230ef69520757811f8eab02899acbe3b672e7b0004de253fd13.exe windows x86
adab1e0ceac02cd75ae3b6ed5b825b4d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysAllocStringByteLen
SysFreeString
shlwapi
PathAppendA
user32
GetSystemMetrics
WinHelpA
SetDlgItemTextA
SetWindowTextA
EndDialog
LoadStringA
OemToCharA
OemToCharBuffA
wsprintfA
SendDlgItemMessageA
DialogBoxParamA
kernel32
IsValidLocale
OpenEventA
SetUnhandledExceptionFilter
IsValidCodePage
FreeEnvironmentStringsA
HeapReAlloc
GetTimeFormatA
VirtualQuery
GetUserDefaultLCID
LocalFree
HeapFree
DeviceIoControl
GetSystemTime
TlsAlloc
RtlUnwind
GetTempPathA
GetCurrentDirectoryA
VirtualAlloc
GetCommandLineA
GetOEMCP
CloseHandle
ExpandEnvironmentStringsA
FindFirstFileA
CopyFileA
SetHandleCount
VirtualFree
GetDateFormatA
SetFilePointer
GetSystemInfo
FindNextFileA
HeapDestroy
SetEndOfFile
GetCurrentThreadId
GetModuleHandleA
GetPrivateProfileStringA
FlushFileBuffers
OpenProcess
LocalAlloc
CreateProcessA
IsBadCodePtr
EnterCriticalSection
GetStdHandle
GetProcessHeap
WideCharToMultiByte
TlsFree
CreateFileA
DeleteCriticalSection
GetComputerNameA
GetSystemTimeAsFileTime
GetLocalTime
SetLastError
TlsSetValue
CreateMutexA
GetVolumeInformationA
VirtualProtect
GlobalMemoryStatus
GetFileType
SetStdHandle
OutputDebugStringA
FindClose
ReadFile
ReleaseMutex
DeleteFileA
WriteFile
LCMapStringA
UnhandledExceptionFilter
LoadLibraryExA
HeapAlloc
HeapSize
lstrcmpiA
GetSystemDirectoryA
GetACP
TlsGetValue
RaiseException
FreeEnvironmentStringsW
LCMapStringW
SetErrorMode
WaitForSingleObject
FreeLibrary
LeaveCriticalSection
EnumSystemLocalesA
esent
JetCreateIndex
JetGetLS
JetDupSession
JetResetTableSequential
JetCreateDatabaseWithStreaming
JetDelete
JetGetLogInfoInstance2
JetCreateTable
JetGetObjectInfo
JetCreateInstance2
JetBackup
JetTruncateLogInstance
JetOpenDatabase
JetRestoreInstance
JetCommitTransaction
JetFreeBuffer
zipfldr
DllGetClassObject
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 282KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ