Static task
static1
Behavioral task
behavioral1
Sample
c06e3c203e68ef8c9e42905735e408ca871a38fdf998ae57085699116c4393cd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c06e3c203e68ef8c9e42905735e408ca871a38fdf998ae57085699116c4393cd.exe
Resource
win10v2004-20220812-en
General
-
Target
c06e3c203e68ef8c9e42905735e408ca871a38fdf998ae57085699116c4393cd
-
Size
806KB
-
MD5
834cceda5483f1f14827568b58ebb352
-
SHA1
8f508d56507d707c064cbfedd9763572476f685d
-
SHA256
c06e3c203e68ef8c9e42905735e408ca871a38fdf998ae57085699116c4393cd
-
SHA512
543469342f828c3a61a9a91538bb767747523a9805797fc791890e1ac748fa8334fe4e0b525ae6cd1853f33be5c6f98308d419ef5a7fd0ed9daca9c61912c096
-
SSDEEP
24576:TE9rFCKN30p1cwCzFabyOPu4/hLTtdaPvd:49/mnCzUn8V
Malware Config
Signatures
Files
-
c06e3c203e68ef8c9e42905735e408ca871a38fdf998ae57085699116c4393cd.exe windows x86
44ae210f77ea0b7b5372f519863f9186
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoUninitialize
CoTaskMemFree
advapi32
RegCreateKeyExA
RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExA
oleaut32
SysAllocStringLen
user32
DestroyMenu
PostQuitMessage
SetWindowPos
IsWindow
EndPaint
PeekMessageA
GetCursorPos
ReleaseDC
SendMessageW
GetClientRect
DestroyWindow
GetMessageA
GetParent
UpdateWindow
ShowWindow
SetCapture
EnableWindow
TranslateMessage
GetWindow
LoadStringA
EnableMenuItem
RegisterClassA
GetWindowLongA
SetTimer
SetForegroundWindow
DispatchMessageA
SetFocus
BeginPaint
KillTimer
DefWindowProcA
GetSystemMetrics
GetWindowRect
PostMessageA
SetWindowLongA
SetWindowTextA
GetSubMenu
CreateWindowExA
GetDlgItem
ScreenToClient
GetDesktopWindow
EndDialog
GetFocus
MessageBoxA
GetSysColor
SystemParametersInfoA
IsWindowVisible
InvalidateRect
CallWindowProcA
SetCursor
FillRect
kernel32
GetStdHandle
GetConsoleOutputCP
ReleaseMutex
GetFileAttributesA
WaitForSingleObject
FindFirstFileW
HeapDestroy
GetFileAttributesW
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetConsoleMode
LocalAlloc
FreeEnvironmentStringsW
WideCharToMultiByte
GetStringTypeA
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
GetFullPathNameA
GetOEMCP
LocalFree
FormatMessageW
InitializeCriticalSection
LoadResource
FindClose
TlsGetValue
FormatMessageA
OutputDebugStringA
SetLastError
GetModuleFileNameW
VirtualProtect
IsDebuggerPresent
HeapAlloc
GetVersionExA
GetModuleFileNameA
LoadLibraryExA
UnhandledExceptionFilter
InterlockedDecrement
MultiByteToWideChar
SetFilePointer
CreateThread
SetUnhandledExceptionFilter
MulDiv
GetSystemDirectoryA
SetEnvironmentVariableA
TerminateProcess
WriteConsoleA
GlobalAlloc
GetCurrentThreadId
GetTickCount
GetVersion
GetCommandLineA
GetModuleHandleA
GetCurrentProcessId
GetLastError
GetCurrentThread
ExitProcess
VirtualAlloc
FindResourceA
Sleep
VirtualFree
FindResourceW
HeapCreate
IsValidCodePage
SetStdHandle
GetModuleHandleW
GetACP
CloseHandle
ReadFile
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
GetCurrentDirectoryA
GetCommandLineW
LockResource
GetEnvironmentStrings
FileTimeToLocalFileTime
GetCPInfo
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
FindNextFileW
LCMapStringA
GetConsoleCP
lstrlenA
UnmapViewOfFile
LCMapStringW
LoadLibraryExW
LeaveCriticalSection
CreateFileA
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
RemoveDirectoryA
GlobalLock
WaitForMultipleObjects
DuplicateHandle
FindNextFileA
ResetEvent
CompareStringA
GetDiskFreeSpaceA
GlobalFree
FindFirstFileA
lstrcmpA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
DeleteFileW
SetEvent
SetErrorMode
GetWindowsDirectoryA
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
QueryPerformanceCounter
FreeLibrary
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetCurrentDirectoryA
InterlockedIncrement
GetLocaleInfoA
SetEndOfFile
gdi32
SetBkColor
SetTextColor
SelectObject
Sections
.text Size: 761KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ