Static task
static1
Behavioral task
behavioral1
Sample
c38e9318dd1d293517a35cb33781526dec3ce7db612484190d19aab15e39e9f5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c38e9318dd1d293517a35cb33781526dec3ce7db612484190d19aab15e39e9f5.exe
Resource
win10v2004-20220812-en
General
-
Target
c38e9318dd1d293517a35cb33781526dec3ce7db612484190d19aab15e39e9f5
-
Size
1.5MB
-
MD5
8034386398ab322394fdda6b41a20bd3
-
SHA1
9ea1cfbc881f5d20e3590fd9f053dd46c37aac8a
-
SHA256
c38e9318dd1d293517a35cb33781526dec3ce7db612484190d19aab15e39e9f5
-
SHA512
0c7a6270bc50dec202284ee1243f4f08e7a78b57f07425ee4006c21ee3b8143c1621526baa685fd90102778121deae3824373dae7749d8a0f28be28537c657d1
-
SSDEEP
24576:gCmtJACOtnmCODn/nYwQMToTH70auKjukrXucyhC+3RbCW/IojvMPKdAMu:gq0wMEb2IuEhSC+h/AojvAT
Malware Config
Signatures
Files
-
c38e9318dd1d293517a35cb33781526dec3ce7db612484190d19aab15e39e9f5.exe windows x86
ce2ee33d767dde30824243b85bdac10e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
UuidCreate
RpcStringFreeA
UuidToStringA
kernel32
ReadFile
SetFilePointer
GetLastError
CreateFileA
FlushFileBuffers
InterlockedIncrement
InterlockedDecrement
lstrlenA
CloseHandle
WriteFile
GetTempPathA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
GetPrivateProfileStringA
GetPrivateProfileIntA
IsBadCodePtr
IsBadReadPtr
CreateDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcmpiA
GetCurrentThreadId
GetCommandLineA
lstrcpyA
lstrlenW
MultiByteToWideChar
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcpynA
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
SetHandleCount
DebugBreak
SetStdHandle
SetUnhandledExceptionFilter
OutputDebugStringA
CreateProcessA
lstrcatA
RtlUnwind
GetACP
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetOEMCP
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetFileType
GetStdHandle
GetCPInfo
HeapReAlloc
HeapAlloc
HeapSize
RaiseException
VirtualAlloc
IsBadWritePtr
HeapFree
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
user32
CharNextA
LoadStringA
CharLowerA
wvsprintfA
advapi32
RegCloseKey
RegOpenKeyExA
RegDeleteValueA
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
ole32
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CoInitialize
CoUninitialize
oleaut32
RegisterTypeLi
LoadTypeLi
SysAllocString
VarUI4FromStr
SysFreeString
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ