Static task
static1
Behavioral task
behavioral1
Sample
c7cf2afbb2301affa4a09c337516e6f9d675e8cdcd775863feb85392cd29c13d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c7cf2afbb2301affa4a09c337516e6f9d675e8cdcd775863feb85392cd29c13d.exe
Resource
win10v2004-20220812-en
General
-
Target
c7cf2afbb2301affa4a09c337516e6f9d675e8cdcd775863feb85392cd29c13d
-
Size
390KB
-
MD5
b748393e97c6ca8fefd69ce43d49d24e
-
SHA1
c1977fda8f760792c665466b00e1166f16ff1048
-
SHA256
c7cf2afbb2301affa4a09c337516e6f9d675e8cdcd775863feb85392cd29c13d
-
SHA512
06858ea5aebe9d14c8f96b658928d13fb27b683e8acd9d026089724a5cf88dd8fd4e943a74e82aa7a151fecca92817416a02246013d6217ed4438c8e6284a31b
-
SSDEEP
6144:tqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnrG:rO1xm+QoK0t4K3gCTDYWGrYzt+NST/
Malware Config
Signatures
Files
-
c7cf2afbb2301affa4a09c337516e6f9d675e8cdcd775863feb85392cd29c13d.exe windows x86
93a3d0fb367864d13ffa527159b79efa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
lstrlenA
ResetEvent
LocalFree
GetSystemTime
GetDiskFreeSpaceA
GetComputerNameA
GetCommandLineW
GetModuleHandleA
LocalUnlock
SetLastError
CloseHandle
HeapCreate
FormatMessageA
CreateFileA
UnmapViewOfFile
LoadLibraryW
GetTickCount
CreateThread
FindVolumeClose
user32
IsWindow
DrawStateA
GetComboBoxInfo
GetDC
CheckRadioButton
DispatchMessageA
CallWindowProcA
FillRect
SetFocus
CreateWindowExA
GetDlgItem
DrawMenuBar
DrawEdge
advapi32
RegDeleteKeyA
RegEnumValueA
IsTokenUntrusted
FreeSid
RegCloseKey
hdwwiz.cpl
AddHardwareWizard
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ