Static task
static1
Behavioral task
behavioral1
Sample
ce289c06e08c7fd230cae9df6bd6a9fdd8368a33cfdc726d7ee9620f3867d01c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ce289c06e08c7fd230cae9df6bd6a9fdd8368a33cfdc726d7ee9620f3867d01c.exe
Resource
win10v2004-20221111-en
General
-
Target
ce289c06e08c7fd230cae9df6bd6a9fdd8368a33cfdc726d7ee9620f3867d01c
-
Size
544KB
-
MD5
5b3a98e11256a1ea95f5a1108c7a2b95
-
SHA1
88bb2796a95bf9b819e4a60ba65010fbfa20e449
-
SHA256
ce289c06e08c7fd230cae9df6bd6a9fdd8368a33cfdc726d7ee9620f3867d01c
-
SHA512
3337d599685e67f464e23f0212a5055ebd1ad3f2d058927010a2bee7eb21d860097f25e49c3f1658376d5caeb2425c6e2dbe9059133d670ec7cc8d28de77cfcf
-
SSDEEP
12288:88gch1qRky45NiIhdVd1kg7Z6ZQC0eviVC3:88F9y45N1n/kg7kZBFT
Malware Config
Signatures
Files
-
ce289c06e08c7fd230cae9df6bd6a9fdd8368a33cfdc726d7ee9620f3867d01c.exe windows x86
d23fbda4713d0835cc2b49ed32012661
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsFree
MapViewOfFile
GetConsoleMode
CompareStringA
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
GetCommandLineW
LockResource
GetCurrentProcessId
WritePrivateProfileStringA
GetEnvironmentStrings
FileTimeToLocalFileTime
lstrlenW
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
GlobalFree
lstrlenA
LCMapStringW
LoadLibraryExW
InitializeCriticalSection
GetLastError
LeaveCriticalSection
HeapAlloc
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
RemoveDirectoryA
WaitForMultipleObjects
DuplicateHandle
FindFirstFileW
CreateFileMappingA
ResetEvent
GetCurrentThreadId
FindFirstFileA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
DeleteFileW
GetWindowsDirectoryA
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
IsBadWritePtr
GetTickCount
QueryPerformanceCounter
FreeLibrary
GetVersionExW
LoadLibraryW
SetHandleCount
GetSystemTime
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
GetVersion
HeapCreate
SetEndOfFile
SetFilePointer
WriteConsoleA
SetUnhandledExceptionFilter
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
CreateFileA
SetFileAttributesA
CreateThread
GetModuleHandleA
CreateMutexA
GetLocalTime
MultiByteToWideChar
UnhandledExceptionFilter
GetPrivateProfileStringA
LoadLibraryExA
lstrcmpiW
GetModuleFileNameA
InterlockedExchange
GetVersionExA
ExitProcess
IsDebuggerPresent
VirtualProtect
GetModuleFileNameW
InterlockedDecrement
SetLastError
OutputDebugStringA
FormatMessageA
TlsGetValue
FindClose
GlobalLock
LoadResource
GetEnvironmentVariableA
FormatMessageW
LocalFree
SetEvent
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
WriteFile
GetStringTypeA
lstrcmpiA
WideCharToMultiByte
GetTempPathA
GetLocaleInfoW
FreeEnvironmentStringsW
SetErrorMode
ExpandEnvironmentStringsA
lstrcatA
LocalAlloc
GetCurrentDirectoryA
GetStartupInfoW
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindNextFileA
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
FindResourceW
VirtualFree
Sleep
FindResourceA
VirtualAlloc
ReadFile
CloseHandle
lstrcpynA
GetACP
GetModuleHandleW
UnmapViewOfFile
SetStdHandle
SizeofResource
CreateProcessA
VirtualQuery
IsValidCodePage
GetLocaleInfoA
GetOEMCP
oleaut32
SysAllocStringLen
VariantInit
SysAllocString
SysFreeString
gdi32
SetBkColor
DeleteObject
GetDeviceCaps
DeleteDC
GetStockObject
SetTextColor
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
BitBlt
ole32
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitialize
user32
PostMessageA
IsIconic
GetWindowRect
GetSystemMetrics
DefWindowProcA
KillTimer
BeginPaint
SetFocus
FillRect
CreateWindowExA
GetWindowLongA
EnableMenuItem
LoadStringA
GetWindow
IsWindowEnabled
TranslateMessage
PeekMessageA
EnableWindow
LoadCursorA
ShowWindow
SetWindowLongA
GetParent
GetMessageA
PtInRect
GetKeyState
TrackPopupMenu
GetClientRect
ScreenToClient
SendMessageA
ReleaseDC
GetCursorPos
GetDC
EndPaint
DispatchMessageA
IsWindow
SetWindowPos
PostQuitMessage
DestroyMenu
DestroyWindow
LoadIconA
GetDesktopWindow
SetWindowTextA
GetSubMenu
GetDlgItem
UpdateWindow
ClientToScreen
SetForegroundWindow
GetFocus
EndDialog
MessageBoxA
DialogBoxParamA
GetSysColor
SystemParametersInfoA
IsWindowVisible
InvalidateRect
wsprintfA
CallWindowProcA
SetCursor
SetCapture
advapi32
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteValueA
version
VerQueryValueA
GetFileVersionInfoA
msvcrt
_strcmpi
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_cexit
_controlfp
__p__commode
__p__fmode
__set_app_type
_except_handler3
_adjust_fdiv
Sections
.text Size: 328KB - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ