Static task
static1
Behavioral task
behavioral1
Sample
c57b4130dd85c947ad92e77ba58d1e20d38a7b3e7518d6d7aaf24e49734a20bb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c57b4130dd85c947ad92e77ba58d1e20d38a7b3e7518d6d7aaf24e49734a20bb.exe
Resource
win10v2004-20220812-en
General
-
Target
c57b4130dd85c947ad92e77ba58d1e20d38a7b3e7518d6d7aaf24e49734a20bb
-
Size
669KB
-
MD5
e0e7c48d1904328d1299c9b86a381bf5
-
SHA1
e48428e4b6b2b67f9b0d7a5b12d6abfd9f6e4a13
-
SHA256
c57b4130dd85c947ad92e77ba58d1e20d38a7b3e7518d6d7aaf24e49734a20bb
-
SHA512
0caa3a81d8e2cacd02f4347f288706c77e00bdba2ac365c1dadc57f3d19cbed8bacec6efff2b6fc9721d631948a4464a4ab396dcd0564b60dd4d6767e595a508
-
SSDEEP
12288:8AFwHCJ7T6n4DtDbbCVmrSnty5tZsyFs7vxYgr4BrDLiKKDS4plq:8AFwiJSupvAt60As7/r4RxGw
Malware Config
Signatures
Files
-
c57b4130dd85c947ad92e77ba58d1e20d38a7b3e7518d6d7aaf24e49734a20bb.exe windows x86
0cc39965c78d4f93edbc89ac3f299837
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetForegroundWindow
MoveWindow
SetWindowPos
IsWindow
ReleaseDC
DestroyWindow
GetMessageA
UpdateWindow
DefWindowProcA
ShowWindow
EnableWindow
TranslateMessage
IsIconic
CreateWindowExA
FillRect
DispatchMessageA
SetFocus
ClientToScreen
BeginPaint
MapWindowPoints
GetSystemMetrics
GetWindowRect
EndDialog
SetWindowTextA
SetTimer
GetDlgItem
ScreenToClient
LoadCursorA
GetDesktopWindow
GetFocus
MessageBoxA
SystemParametersInfoA
EnableMenuItem
InvalidateRect
SendMessageA
DrawTextA
GetClientRect
CallWindowProcA
gdi32
SetBkColor
CreateCompatibleDC
SelectObject
SetBkMode
BitBlt
advapi32
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegCloseKey
RegDeleteKeyA
RegOpenKeyExW
kernel32
LocalAlloc
SetErrorMode
FreeEnvironmentStringsW
WideCharToMultiByte
lstrcmpiA
GetStringTypeA
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
SetEvent
GetLocaleInfoA
GetExitCodeProcess
GetEnvironmentVariableA
LoadResource
FindClose
InterlockedDecrement
FormatMessageA
SetLastError
TlsGetValue
GetModuleFileNameW
IsDebuggerPresent
HeapAlloc
FlushFileBuffers
GetModuleFileNameA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
HeapDestroy
GetFileAttributesW
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
LocalFree
GetSystemInfo
GetCommandLineA
GetCurrentThread
GetTickCount
GetModuleHandleA
GetCurrentThreadId
GetLastError
GetVersion
GetCurrentProcessId
ExitProcess
VirtualAlloc
ResetEvent
GetOEMCP
Sleep
VirtualFree
HeapCreate
IsValidCodePage
GetEnvironmentStrings
SetStdHandle
GetModuleHandleW
GetACP
CloseHandle
ReadFile
TlsFree
MapViewOfFile
RaiseException
HeapSize
GetCPInfo
GetCommandLineW
LockResource
SizeofResource
lstrlenW
GlobalAlloc
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
lstrlenA
UnhandledExceptionFilter
UnmapViewOfFile
LCMapStringW
InitializeCriticalSection
InterlockedIncrement
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GlobalLock
FindFirstFileW
CompareStringA
GetDiskFreeSpaceA
GlobalFree
FindFirstFileA
GetProcessHeap
GetProcAddress
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
VirtualProtect
TlsAlloc
QueryPerformanceCounter
FreeLibrary
LoadLibraryW
SetHandleCount
EnterCriticalSection
LeaveCriticalSection
SetEndOfFile
VirtualQuery
WriteConsoleA
TerminateProcess
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
MultiByteToWideChar
LoadLibraryExW
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
ole32
CoInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
Sections
.text Size: 639KB - Virtual size: 961KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ