Static task
static1
Behavioral task
behavioral1
Sample
c74800ddcb0c3f2812f2c87b1e14955613b8076305ab4757f35985685adbc032.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c74800ddcb0c3f2812f2c87b1e14955613b8076305ab4757f35985685adbc032.exe
Resource
win10v2004-20220812-en
General
-
Target
c74800ddcb0c3f2812f2c87b1e14955613b8076305ab4757f35985685adbc032
-
Size
77KB
-
MD5
26dcf37996c9b5df68da86a0e51102a9
-
SHA1
cbff1690dc5e55afaccb5bdad0a220228e8c304b
-
SHA256
c74800ddcb0c3f2812f2c87b1e14955613b8076305ab4757f35985685adbc032
-
SHA512
12d8ea57fe7c28e3e6304057390bb1299f55d2bf22bbccd9f9dece258bcff58b29f855f3e77e309cd0c02a701b62cba358b0d4249f06309ac87e6af29b6713c9
-
SSDEEP
1536:IBDOtUWuvB8dNjSQYd5hunGK4RSJkXbVSxGKiEsjjjtUT57w66b7:IBas8DjSjunGyJkXbEiEsBUTBY
Malware Config
Signatures
Files
-
c74800ddcb0c3f2812f2c87b1e14955613b8076305ab4757f35985685adbc032.exe windows x86
9ed980254b51cae1563fa8702b366764
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
signal
strrchr
__p__commode
__p__fmode
_exit
exit
__p___initenv
fopen
_initterm
malloc
__getmainargs
_snprintf
memcpy
fflush
free
calloc
_XcptFilter
__setusermatherr
_adjust_fdiv
__set_app_type
sprintf
getenv
strlen
_controlfp
_except_handler3
kernel32
SetFileTime
GetProcAddress
GetModuleHandleW
Sleep
GetVersion
GetProcessHeap
GetTempPathW
GetCommandLineW
QueryPerformanceCounter
lstrcmpiA
OpenProcess
SetFilePointer
VirtualQuery
VirtualProtectEx
FileTimeToLocalFileTime
gdi32
SetWorldTransform
GetTextMetricsA
StartDocA
CreateICW
CloseMetaFile
EnumMetaFile
GetCharacterPlacementA
IntersectClipRect
EnumFontsA
OffsetRgn
PtInRegion
GetCurrentObject
CreateMetaFileW
SetTextJustification
ole32
GetRunningObjectTable
RevokeDragDrop
CoCreateInstance
CoGetMalloc
IsEqualGUID
CoInitialize
CreateILockBytesOnHGlobal
CoDisconnectObject
CoRegisterClassObject
CoGetInterfaceAndReleaseStream
OleUninitialize
StringFromGUID2
OleSetClipboard
CoCreateGuid
PropVariantClear
CoRevokeClassObject
CoSetProxyBlanket
advapi32
AllocateAndInitializeSid
RegFlushKey
QueryServiceStatus
OpenProcessToken
RegCreateKeyA
OpenSCManagerW
GetTokenInformation
FreeSid
DeleteService
RegQueryInfoKeyW
OpenSCManagerA
GetUserNameA
RegEnumKeyExA
CryptDestroyHash
RegQueryInfoKeyA
user32
WindowFromPoint
DefWindowProcA
OpenClipboard
IsWindowVisible
comctl32
ImageList_Create
ImageList_LoadImageW
ImageList_GetIcon
ImageList_LoadImageA
ImageList_Read
CreatePropertySheetPageW
ImageList_SetImageCount
ImageList_DragLeave
ImageList_Remove
ImageList_Destroy
ImageList_ReplaceIcon
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ