Static task
static1
Behavioral task
behavioral1
Sample
c88cf0f6761f586dc843b422a22e5cd527e5e05a5874696da2ba3b83cf32d6e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c88cf0f6761f586dc843b422a22e5cd527e5e05a5874696da2ba3b83cf32d6e5.exe
Resource
win10v2004-20220901-en
General
-
Target
c88cf0f6761f586dc843b422a22e5cd527e5e05a5874696da2ba3b83cf32d6e5
-
Size
65KB
-
MD5
6650c61a4d9abc92fc8e415b6ccd49fa
-
SHA1
e35446b9ded87374f421936dafeda2256b341da0
-
SHA256
c88cf0f6761f586dc843b422a22e5cd527e5e05a5874696da2ba3b83cf32d6e5
-
SHA512
89ffbe77d26aaf1e1133f2ec42b8a3ca07f6b6a04d293135f47cfbdbc9114990a973967a788ccc64909f61a8ae0baeca9e4b4870b1f955b55d8de9fe64f437dd
-
SSDEEP
1536:81zWpUwODAqZt8MViqZqYBFZF/stSQ5ipjTgAkeb3xRM2:P2DdZS6Ui/s0wSj4Yw2
Malware Config
Signatures
Files
-
c88cf0f6761f586dc843b422a22e5cd527e5e05a5874696da2ba3b83cf32d6e5.exe windows x86
c8af5a8c434cc62d9e9d4154aae97fac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatW
GetUserDefaultUILanguage
CreateMutexW
GlobalLock
VirtualAlloc
lstrcpyA
GetSystemTime
ReleaseMutex
CreateEventW
lstrcatA
GetFileSize
GetLocalTime
lstrcmpiA
CloseHandle
GetFileSizeEx
GetFileAttr1ibutesA
FindClose
FindFirstFileW
lstrlenA
OpenMutexW
InitializeCriticalSection
VirtualProtect
LeaveCriticalSection
LoadLibraryA
lstrcpynW
HeapAlloc
GetModuleFileNameW
GetTimeZoneInformation
Sleep
shlwapi
PathFindFileNameW
PathMatchSpecW
PathCombineW
wnsprintfW
PathFileExistsW
StrStrW
StrCmpNIA
SHDeleteKeyA
StrCmpNIW
PathRemoveFileSpecW
wvnsprintfW
wnsprintfA
advapi32
CryptHashData
RegQueryValueExA
CryptReleaseContext
GetUserNameW
RegEnumKeyExA
DuplicateTokenEx
RegCreateKeyExA
CryptDestroyHash
CryptAcquireContextW
RegSetValueExA
user32
GetKeyboardState
FindWindowExA
GetWindowThreadProcessId
GetClipboardData
GetClassNameA
GetWindowTextA
GetMessageA
CloseDesktop
DispatchMessageA
GetDlgItem
MsgWaitForMultipleObjects
SendMessageA
ExitWindowsEx
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE