Static task
static1
Behavioral task
behavioral1
Sample
c1c3184598293a852dad1c4dd11b261f93cf91d30049bd16731b5b2d952612c3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c1c3184598293a852dad1c4dd11b261f93cf91d30049bd16731b5b2d952612c3.exe
Resource
win10v2004-20220812-en
General
-
Target
c1c3184598293a852dad1c4dd11b261f93cf91d30049bd16731b5b2d952612c3
-
Size
107KB
-
MD5
3a6644f3b7787bc30b7a61bdda0b1941
-
SHA1
5f46fbf1f0dec7aa62a31d0f65edaf549ec8debc
-
SHA256
c1c3184598293a852dad1c4dd11b261f93cf91d30049bd16731b5b2d952612c3
-
SHA512
ccd443c6bc41812b0b56417fb8473d28bd0b046c2c37df7703e09a1821eb2507db17a37d659f01da8afb7f677d2ab79728233738effd8e3a52110b57f736b581
-
SSDEEP
1536:NyIoQfOZKR+2B2spEmK0iF8PKfBRgL3AdrrwbSmnG5rfbc8oW7clRG4ewdcjzn:NyI3fO+gsBO7aAKlWrfbYlRXy
Malware Config
Signatures
Files
-
c1c3184598293a852dad1c4dd11b261f93cf91d30049bd16731b5b2d952612c3.exe windows x86
aaf6e905789d31a297f44998048a5463
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseColorA
msvcrt
_initterm
free
printf
_except_handler3
_XcptFilter
_errno
_exit
_acmdln
__p__fmode
strcmp
__p__commode
exit
__getmainargs
__set_app_type
atexit
calloc
signal
atan
__setusermatherr
_adjust_fdiv
kernel32
SetFileTime
GetPrivateProfileStringA
GetStartupInfoA
GlobalAlloc
Sleep
SetHandleCount
SetLastError
GetModuleFileNameW
advapi32
GetTokenInformation
RegQueryValueA
CloseServiceHandle
RegEnumValueA
ole32
RegisterDragDrop
ReleaseStgMedium
OleInitialize
OleSetMenuDescriptor
CoTaskMemFree
StringFromCLSID
OleDraw
OleUninitialize
StgOpenStorage
comctl32
ImageList_Read
CreateStatusWindowA
InitializeFlatSB
ImageList_BeginDrag
ImageList_GetBkColor
ImageList_Create
ImageList_Write
ImageList_Add
ImageList_GetImageInfo
oleaut32
LoadTypeLib
SysStringLen
SysFreeString
SysStringByteLen
VariantClear
GetActiveObject
VariantCopyInd
gdi32
GetCharWidthW
CreateFontA
CreateRectRgnIndirect
shell32
SHGetFolderPathW
CommandLineToArgvW
DragQueryFile
SHGetPathFromIDListW
user32
EqualRect
DestroyCursor
ScreenToClient
FindWindowA
ReleaseCapture
IsRectEmpty
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ