Static task
static1
Behavioral task
behavioral1
Sample
c1765ef578a1792b22a76bc09db99a3080177a1b7400a20171e97b5d59f44cbd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c1765ef578a1792b22a76bc09db99a3080177a1b7400a20171e97b5d59f44cbd.exe
Resource
win10v2004-20220812-en
General
-
Target
c1765ef578a1792b22a76bc09db99a3080177a1b7400a20171e97b5d59f44cbd
-
Size
198KB
-
MD5
5e32b1130c5c7e42545dc669cfee8df3
-
SHA1
2390d0e5b510337c13738b04d25e68700f84e8cc
-
SHA256
c1765ef578a1792b22a76bc09db99a3080177a1b7400a20171e97b5d59f44cbd
-
SHA512
f1cd68636ea760cb6105852e31cd06149d979f2c8ad582452f308388ddd36a17233a15e94c7ec594912cc09791e81ce9bec19f7e32e1c89d6de44058aedc40f6
-
SSDEEP
3072:cuz1yhYplO3vQNexldIV0dShSaKA0xfn2iaU6tyzGFlyCbwrHDh:/1Lu34N70dwKAF/tAGwx
Malware Config
Signatures
Files
-
c1765ef578a1792b22a76bc09db99a3080177a1b7400a20171e97b5d59f44cbd.exe windows x86
f2b7aebfa6c402d46076bf485db8e5a1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetCursor
GetMenu
GetWindowTextLengthA
DrawIconEx
AppendMenuW
CopyImage
DrawTextW
LoadMenuA
InsertMenuA
DrawIcon
IsMenu
GetDC
DialogBoxParamA
GetWindowTextA
AppendMenuA
CloseWindow
CopyRect
AlignRects
EndDialog
GetFocus
CreateIcon
DialogBoxParamW
CalcMenuBar
BlockInput
CopyIcon
GetDlgItem
DrawTextA
LoadCursorA
IsWindow
GetMenu
CreateIcon
DrawTextA
GetCursor
CopyImage
CalcMenuBar
LoadMenuA
CloseWindow
GetWindowTextLengthA
IsWindow
GetFocus
BlockInput
DrawIconEx
GetDlgItem
GetWindowTextA
DrawIcon
DialogBoxParamA
CopyIcon
CopyRect
EndDialog
AlignRects
InsertMenuA
AppendMenuA
DialogBoxParamW
IsMenu
DrawTextW
GetDC
AppendMenuW
LoadCursorA
advapi32
RegGetKeySecurity
RegEnumValueW
RegCreateKeyExW
RegQueryValueExW
RegLoadKeyW
RegReplaceKeyA
RegOpenKeyExA
RegDeleteKeyW
RegCreateKeyExA
RegLoadKeyA
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyA
RegEnumValueA
RegEnumKeyExA
RegOpenKeyA
RegReplaceKeyW
RegDeleteValueW
RegEnumKeyW
RegQueryValueW
RegCreateKeyW
RegQueryInfoKeyA
RegDeleteValueA
RegFlushKey
RegEnumKeyExW
RegOpenKeyW
RegQueryValueA
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyW
RegQueryInfoKeyW
RegQueryValueA
RegDeleteValueA
RegFlushKey
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyW
RegQueryValueExA
RegEnumKeyExW
RegLoadKeyA
RegDeleteKeyW
RegEnumValueA
RegQueryValueExW
RegEnumKeyW
RegEnumKeyA
RegCreateKeyExA
RegLoadKeyW
RegQueryInfoKeyA
RegGetKeySecurity
RegReplaceKeyW
RegOpenKeyExW
RegQueryValueW
RegOpenKeyA
RegCreateKeyExW
RegEnumKeyExA
RegDeleteValueW
RegReplaceKeyA
RegEnumValueW
kernel32
CloseHandle
GetFileType
CloseHandle
GetModuleFileNameA
CloseHandle
Sleep
CloseHandle
lstrcmpiA
CloseHandle
DeleteFileA
CloseHandle
GetDateFormatA
CloseHandle
GetCPInfo
CloseHandle
lstrcpynA
CloseHandle
lstrcatA
CloseHandle
Sections
.tedt Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.raada Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edaaa Size: 5KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iaaaa Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ