Static task
static1
Behavioral task
behavioral1
Sample
c490072027c57dffce28169c1049ae9b31d680f8eb5ae7fe7c2706aece4ad39f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c490072027c57dffce28169c1049ae9b31d680f8eb5ae7fe7c2706aece4ad39f.exe
Resource
win10v2004-20220901-en
General
-
Target
c490072027c57dffce28169c1049ae9b31d680f8eb5ae7fe7c2706aece4ad39f
-
Size
10.7MB
-
MD5
990a308002b06919e2395fdf3b5363fe
-
SHA1
212c0b5887c9c5935b1f818b428bbd1240f50917
-
SHA256
c490072027c57dffce28169c1049ae9b31d680f8eb5ae7fe7c2706aece4ad39f
-
SHA512
fd2305877fc9433770ed03a052d03b55a54277ae14b16b44da9dbbd15881cf8735d6d7c0be7c43c9e684942965c9836da3c6cec9d2f4ae1d0c8d0033928fe6d2
-
SSDEEP
196608:sVCFcco5KFTk3aDEcgQsrYAtzn8Kqq0xTVBKb4X+s1:sVbco5KUcgQKYAtzqq0xT3Kb4us1
Malware Config
Signatures
Files
-
c490072027c57dffce28169c1049ae9b31d680f8eb5ae7fe7c2706aece4ad39f.exe windows x86
8772aa0f1315d55af439aa2dbce82d89
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateNamedPipeA
GetCommandLineA
RemoveDirectoryW
AllocConsole
FlushFileBuffers
DeleteTimerQueue
RemoveDirectoryA
RtlMoveMemory
SetConsoleInputExeNameA
UnregisterConsoleIME
lstrlenA
FreeConsole
GetFileTime
Toolhelp32ReadProcessMemory
GetCurrentThread
CreateDirectoryExA
VirtualAllocEx
IsSystemResumeAutomatic
CopyFileExA
OpenWaitableTimerA
CopyFileExW
GetFullPathNameA
SetCommTimeouts
GetVolumePathNameA
OpenJobObjectA
SetComputerNameExA
PeekConsoleInputA
Module32Next
SetCalendarInfoA
GetLastError
VerifyVersionInfoA
GetDriveTypeA
MoveFileWithProgressA
SetFileApisToOEM
DefineDosDeviceA
LocalSize
GetNamedPipeHandleStateA
dpmodemx
SPInit
advapi32
CredFree
user32
DrawMenuBar
InsertMenuItemW
GetWindow
FindWindowExA
SetClassLongA
IsDialogMessage
EnumDisplaySettingsExW
SetWindowStationUser
ToAscii
LoadKeyboardLayoutEx
CreateMDIWindowA
IsDialogMessageA
ShowStartGlass
GetScrollPos
PostMessageA
MessageBoxTimeoutA
GetAppCompatFlags2
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 742KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 339KB - Virtual size: 338KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 431KB - Virtual size: 431KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ