Static task
static1
Behavioral task
behavioral1
Sample
c2088ae0e7fb4f2b11d724d3995b64e83fe53fcbe1ec2d016390bf0c834c3278.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c2088ae0e7fb4f2b11d724d3995b64e83fe53fcbe1ec2d016390bf0c834c3278.exe
Resource
win10v2004-20220812-en
General
-
Target
c2088ae0e7fb4f2b11d724d3995b64e83fe53fcbe1ec2d016390bf0c834c3278
-
Size
814KB
-
MD5
f159a32c0b3a3afe1db4bc078611935c
-
SHA1
85e5c165db9b4b84f60236fc354becaffb80b4e3
-
SHA256
c2088ae0e7fb4f2b11d724d3995b64e83fe53fcbe1ec2d016390bf0c834c3278
-
SHA512
80cd9580aec17b78587959d3659d9d0291fa0e0b11d50548760a086fd49ca63401dedeb6bf820515536e6d88f2851341a14464908354c8f1094c643d103eecf0
-
SSDEEP
12288:pW0VkrWdvLAQYn87wjkRnhXmX4qZL4Nv4O9/JFWxaBvULd4aMPXNBBQBDJmJ:c00KY87wY2IocNvX/JgcdRQBDEJ
Malware Config
Signatures
Files
-
c2088ae0e7fb4f2b11d724d3995b64e83fe53fcbe1ec2d016390bf0c834c3278.exe windows x86
0bed0d9b956ff14164119739f5113ebb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateSemaphoreW
GetEnvironmentVariableA
HeapCreate
CloseHandle
GetStartupInfoA
SuspendThread
FindClose
OpenEventA
DeleteFileA
GetCommandLineW
HeapDestroy
WriteConsoleA
ExitProcess
lstrlenW
GetVersion
CloseHandle
SetLastError
GetModuleHandleA
FindResourceExA
user32
CallWindowProcW
GetClassInfoA
IsZoomed
CreateIcon
PeekMessageA
SetFocus
GetWindowLongA
GetSysColor
DispatchMessageA
DispatchMessageA
FindWindowA
GetKeyState
DrawTextW
docprop
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 806KB - Virtual size: 805KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ