Static task
static1
Behavioral task
behavioral1
Sample
c2b76003bc0c14a42ba5638fb21eaaabb8e01813ac91f477caa89bb48bc194d7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c2b76003bc0c14a42ba5638fb21eaaabb8e01813ac91f477caa89bb48bc194d7.exe
Resource
win10v2004-20221111-en
General
-
Target
c2b76003bc0c14a42ba5638fb21eaaabb8e01813ac91f477caa89bb48bc194d7
-
Size
188KB
-
MD5
560b76babea45623ca444effb37d4dd0
-
SHA1
51d2ced4704a67fdeec4580d541a5c8071216b54
-
SHA256
c2b76003bc0c14a42ba5638fb21eaaabb8e01813ac91f477caa89bb48bc194d7
-
SHA512
80754af8fb21db1e1552639fba2e0be53753064fa00c04068f54d57243652c474980ff8d2ff19af28248469164bfa505b5307e9edb88bb6a538eb47451cbc2b0
-
SSDEEP
3072:g8f9DNQGX7MCpiZxoNRyZ7hRPPzvoaEmsYJald6Sp2K74ipvEizou6QDylR:gSfXpgmyphRPc8sYJWd3BRpzzD
Malware Config
Signatures
Files
-
c2b76003bc0c14a42ba5638fb21eaaabb8e01813ac91f477caa89bb48bc194d7.exe windows x86
da75b2f2b9a3b5fe5f85e441c146b96e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetFocus
DefWindowProcA
wsprintfA
EnableWindow
SetFocus
SetCursor
LoadIconA
SetTimer
SetWindowLongA
GetSystemMetrics
GetActiveWindow
GetWindowLongA
DialogBoxParamA
advapi32
StartServiceCtrlDispatcherA
UnlockServiceDatabase
CreateServiceA
OpenProcessToken
LockServiceDatabase
RegisterServiceCtrlHandlerA
RegSetValueExA
InitializeSecurityDescriptor
RegDeleteValueA
LookupAccountSidA
ole32
CoCreateGuid
CreateBindCtx
WriteClassStm
CreateStreamOnHGlobal
OleRegEnumVerbs
IIDFromString
StringFromCLSID
CoUninitialize
StringFromGUID2
kernel32
HeapReAlloc
IsBadWritePtr
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLastError
HeapAlloc
TlsGetValue
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
VirtualAlloc
Module32Next
GetModuleFileNameA
SystemTimeToFileTime
lstrcatA
SetLastError
WaitForSingleObject
GlobalAlloc
DeleteFileA
GetSystemTimeAsFileTime
LoadLibraryExA
ReadProcessMemory
FormatMessageA
LockResource
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE