Static task
static1
Behavioral task
behavioral1
Sample
c2ec8cdb800486ac941c8349cc11c2cf2c0c735d06d5f6b3f0850b880a3e3041.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c2ec8cdb800486ac941c8349cc11c2cf2c0c735d06d5f6b3f0850b880a3e3041.exe
Resource
win10v2004-20221111-en
General
-
Target
c2ec8cdb800486ac941c8349cc11c2cf2c0c735d06d5f6b3f0850b880a3e3041
-
Size
306KB
-
MD5
fa762aba0abc5ed38a179fcaa6597033
-
SHA1
d7715adcde014de1e14f6e0df6de942522d2d8c4
-
SHA256
c2ec8cdb800486ac941c8349cc11c2cf2c0c735d06d5f6b3f0850b880a3e3041
-
SHA512
4a7b77c98af6526e3d83ee36b85763aca88a3c49565b1de47571da48cb6f875b58373edcd00feb6ec07c67991298b25c9f240bff0500d64c729c2d8ded4b2792
-
SSDEEP
6144:/oH9WLDUOda5CymUT35QurDeoWoPQxtg47vdjgHD3nQtr5o:AUrsCUFPXeoWVgyvdEHDAtr5
Malware Config
Signatures
Files
-
c2ec8cdb800486ac941c8349cc11c2cf2c0c735d06d5f6b3f0850b880a3e3041.exe windows x86
14237468d81875cdccb913831d07c212
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ReleaseDC
PeekMessageA
ReleaseCapture
SetCapture
PtInRect
SystemParametersInfoA
SetWindowLongA
GetActiveWindow
GetLastActivePopup
MessageBoxA
GetKeyState
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
SetCursor
GetDC
SetWindowRgn
IsWindowVisible
SetWindowPos
GetDlgCtrlID
GetClientRect
TranslateAcceleratorA
LoadImageA
LoadIconA
DrawIconEx
IsWindow
DestroyIcon
GetParent
InvalidateRect
UpdateWindow
ScreenToClient
GetWindowRect
FillRect
InflateRect
CopyRect
DrawStateA
GetSystemMetrics
GetForegroundWindow
LoadStringA
EnableWindow
GetMenuItemCount
SetMenuDefaultItem
CreatePopupMenu
PostMessageA
AppendMenuA
GetSubMenu
RemoveMenu
GetCursorPos
LoadMenuA
PostQuitMessage
SetTimer
KillTimer
SendMessageA
RegisterWindowMessageA
SetForegroundWindow
GetPropA
EnumWindows
RemovePropA
ole32
CoInitializeEx
advapi32
GetSecurityDescriptorDacl
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetTokenInformation
LookupAccountSidA
OpenProcessToken
GetSecurityInfo
GetUserNameA
BuildExplicitAccessWithNameA
SetEntriesInAclA
SetSecurityInfo
CreateProcessAsUserA
RegDeleteValueA
OpenServiceA
QueryServiceStatus
CloseServiceHandle
OpenSCManagerA
comctl32
_TrackMouseEvent
kernel32
GetCPInfo
GetOEMCP
GetACP
FatalAppExitA
VirtualFree
HeapCreate
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
TlsAlloc
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
ExitProcess
InitializeCriticalSection
VirtualProtect
GetWindowsDirectoryA
GetCurrentProcess
InterlockedDecrement
CreateEventA
Sleep
PulseEvent
OpenEventA
InterlockedIncrement
GetFileAttributesA
LoadLibraryExA
WaitForSingleObject
FreeLibrary
GetProcAddress
LoadLibraryA
FormatMessageA
SetEndOfFile
ReadFile
GetFileSize
VirtualAlloc
IsBadWritePtr
RtlUnwind
VirtualQuery
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetSystemInfo
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCommandLineA
GetComputerNameA
WaitForMultipleObjects
ResetEvent
GetPriorityClass
GetSystemDirectoryA
GetPrivateProfileIntA
GetCurrentProcessId
OutputDebugStringA
SetErrorMode
SetCurrentDirectoryA
DeviceIoControl
GetExitCodeProcess
CreateProcessA
WriteFile
VerifyVersionInfoA
VerSetConditionMask
GetVersionExA
TerminateProcess
OpenProcess
GetStartupInfoA
SetProcessWorkingSetSize
GlobalFree
GlobalAlloc
LocalAlloc
GetFileAttributesExA
WideCharToMultiByte
GetFullPathNameA
MultiByteToWideChar
GetCurrentThreadId
lstrcpynA
MulDiv
InterlockedExchange
InterlockedCompareExchange
HeapSetInformation
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
SetEvent
ExpandEnvironmentStringsA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
SizeofResource
RaiseException
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
LockResource
LoadResource
FindResourceA
CloseHandle
FindResourceExA
GetLastError
LocalFree
SetLastError
GetModuleFileNameA
GetModuleHandleA
GetTickCount
CreateFileA
SetFilePointer
Sections
.text Size: 247KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ