Static task
static1
Behavioral task
behavioral1
Sample
cf2e9890e1994e1a9a1082052a0af9d4d12af4234d3676724b4070c0a74f57c3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cf2e9890e1994e1a9a1082052a0af9d4d12af4234d3676724b4070c0a74f57c3.exe
Resource
win10v2004-20220901-en
General
-
Target
cf2e9890e1994e1a9a1082052a0af9d4d12af4234d3676724b4070c0a74f57c3
-
Size
148KB
-
MD5
2b57d716dcc5190edc284ad26832b93e
-
SHA1
d2dc6dbcd07a6db325a2d15476db9dfb75d3a9e5
-
SHA256
cf2e9890e1994e1a9a1082052a0af9d4d12af4234d3676724b4070c0a74f57c3
-
SHA512
db591d973cd6a63917ea0775b1a57db7f37fcd9ccbdf7ba7fdd72536037112fff443f0cf305df85c98681d48258b9205eb1fd221e6fd2bd75e9d57027a7755ca
-
SSDEEP
3072:p+FzP+RIch7JjGHr+yZgnNKhGFJZ1FgJ6yDu4Dwn+l1V:rmcLCHr+SgnNKhGFkdDZLV
Malware Config
Signatures
Files
-
cf2e9890e1994e1a9a1082052a0af9d4d12af4234d3676724b4070c0a74f57c3.exe windows x86
16ed3de0a077c6e63d3f2758eaa39ed2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
kernel32
SetEndOfFile
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualQuery
VirtualProtect
GetCPInfo
GetOEMCP
GetACP
HeapSize
WriteFile
GetFileType
GetStdHandle
SetHandleCount
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ReadFile
CloseHandle
LCMapStringW
LCMapStringA
SetFilePointer
GetCurrentProcess
TerminateProcess
ExitProcess
SetUnhandledExceptionFilter
GetVersionExA
GetStartupInfoA
GetModuleHandleA
SetCurrentDirectoryA
SetEnvironmentVariableA
CreateDirectoryA
GetLastError
HeapReAlloc
GetFullPathNameA
GetCurrentDirectoryA
GetDriveTypeA
HeapFree
HeapAlloc
RtlUnwind
RaiseException
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetLocalTime
FindFirstFileA
FindNextFileA
FindClose
DeleteFileA
GetShortPathNameA
GlobalLock
GlobalUnlock
MulDiv
GlobalAlloc
GlobalFree
GetCommandLineA
Sleep
GetTickCount
GetSystemInfo
GlobalMemoryStatus
GetVersion
GetComputerNameA
GetWindowsDirectoryA
GetSystemDirectoryA
WinExec
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryA
InterlockedExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetProcAddress
GetModuleFileNameA
FreeEnvironmentStringsW
FlushFileBuffers
CreateFileA
GetLocaleInfoA
GetCurrentThreadId
QueryPerformanceCounter
GetStringTypeW
GetStringTypeA
user32
ReleaseDC
GetSystemMetrics
GetDC
PostMessageA
IsWindowEnabled
SetFocus
GetFocus
GetDlgItemTextA
GetDlgCtrlID
IsDlgButtonChecked
UnregisterClassA
LoadIconA
LoadCursorA
RegisterClassA
DefWindowProcA
SetWindowLongA
InvalidateRect
BeginPaint
EndPaint
GetClientRect
FillRect
GetSysColor
MoveWindow
SetWindowTextA
GetActiveWindow
GetWindowLongA
FindWindowA
MsgWaitForMultipleObjects
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
GetWindowRect
SetActiveWindow
SetWindowPos
GetAsyncKeyState
GetCursorPos
SetCursorPos
ShowCursor
MessageBoxA
EnumDisplaySettingsA
ChangeDisplaySettingsA
CreateWindowExA
ShowWindow
SendMessageA
DestroyWindow
gdi32
CreateDIBSection
CreateCompatibleDC
Rectangle
DeleteDC
SetStretchBltMode
StretchBlt
Ellipse
MoveToEx
LineTo
SetPixel
GetPixel
GetTextExtentPoint32A
TextOutA
SetDIBColorTable
CreatePalette
SetBkMode
SetTextColor
CreateSolidBrush
CreatePen
GetStockObject
CreateFontIndirectA
GetTextMetricsA
SelectObject
DeleteObject
SelectPalette
RealizePalette
BitBlt
GetDeviceCaps
comdlg32
GetSaveFileNameA
ChooseColorA
GetOpenFileNameA
advapi32
GetUserNameA
shell32
ShellExecuteExA
SHGetSpecialFolderPathA
ShellExecuteA
ole32
CoCreateInstance
IIDFromString
CLSIDFromProgID
OleUninitialize
CreateStreamOnHGlobal
OleInitialize
CoUninitialize
CoInitializeEx
oleaut32
SysAllocStringByteLen
OleLoadPicture
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
VariantClear
VariantInit
SafeArrayAccessData
SafeArrayGetDim
SafeArrayUnaccessData
SafeArrayCreate
SysFreeString
VariantChangeType
VariantCopyInd
VariantCopy
SysAllocString
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetVartype
winmm
sndPlaySoundA
mciSendStringA
Sections
.text Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ