Static task
static1
Behavioral task
behavioral1
Sample
cd85f1a0746345666ff50abedecd05773e8dac42ecccdb1aeb68999a8acf9d95.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cd85f1a0746345666ff50abedecd05773e8dac42ecccdb1aeb68999a8acf9d95.exe
Resource
win10v2004-20221111-en
General
-
Target
cd85f1a0746345666ff50abedecd05773e8dac42ecccdb1aeb68999a8acf9d95
-
Size
82KB
-
MD5
474156b7e434e29c9ab4df8aa1531352
-
SHA1
fdc5df697e9dfe5443988d7e70be19c03dcd0c1b
-
SHA256
cd85f1a0746345666ff50abedecd05773e8dac42ecccdb1aeb68999a8acf9d95
-
SHA512
2a85d784b92e17e78bec194dac1dc2ae665ab894dee3083cfc6e7c4a841ab66b609b24eb8141b0adbc53a9a7e6d115591063e51ad44759c1a81259a6d58ee2c2
-
SSDEEP
1536:GL3GZZdJ7TAt6MlzpHN2VLco2yM5ohCBwLqmbiQGrDthd5hovTuFc:03EZdNAXtALOwDiTDthdov
Malware Config
Signatures
Files
-
cd85f1a0746345666ff50abedecd05773e8dac42ecccdb1aeb68999a8acf9d95.exe windows x86
65b657153ed0e68706d3a0ff13960303
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
GetSysColor
UnhookWindowsHookEx
SetWindowPos
GetSubMenu
PostQuitMessage
EqualRect
EnableMenuItem
EnumWindows
GetSysColorBrush
GetMessageA
GetScrollPos
SetWindowTextA
FrameRect
kernel32
InterlockedExchange
GetStartupInfoA
FileTimeToSystemTime
QueryPerformanceCounter
GetThreadLocale
RtlUnwind
GetTempPathA
ExitProcess
GetTickCount
GetCurrentProcessId
GetTimeZoneInformation
VirtualAllocEx
SetUnhandledExceptionFilter
GetFileAttributesA
gdi32
CopyEnhMetaFileA
CreateICW
CreateCompatibleBitmap
SetViewportExtEx
GetMapMode
SelectClipPath
FillRgn
ExcludeClipRect
DPtoLP
ole32
CoRevokeClassObject
CoInitialize
CoTaskMemRealloc
CoInitializeSecurity
CoCreateInstance
StringFromGUID2
StgOpenStorage
OleRun
DoDragDrop
advapi32
RegCreateKeyA
CryptHashData
CheckTokenMembership
GetSecurityDescriptorDacl
FreeSid
RegCreateKeyExW
GetUserNameA
QueryServiceStatus
AdjustTokenPrivileges
RegQueryValueExW
msvcrt
_mbscmp
strlen
_CIpow
__setusermatherr
_lock
__getmainargs
iswspace
strncpy
_strdup
_flsbuf
__initenv
fflush
_fdopen
raise
strcspn
puts
signal
fprintf
comctl32
ImageList_LoadImageW
ImageList_LoadImageA
InitCommonControls
ImageList_GetIconSize
ImageList_Destroy
ImageList_DragEnter
ImageList_DrawEx
ImageList_ReplaceIcon
ImageList_SetIconSize
CreatePropertySheetPageA
ImageList_Write
ImageList_GetBkColor
ImageList_GetIcon
shell32
DoEnvironmentSubstW
ShellExecuteEx
SHBrowseForFolderA
CommandLineToArgvW
DragAcceptFiles
ExtractIconExW
DragQueryFileA
DragQueryFileW
ShellExecuteW
SHGetPathFromIDList
ExtractIconW
oleaut32
SafeArrayGetUBound
SafeArrayRedim
SafeArrayPtrOfIndex
SafeArrayUnaccessData
SysReAllocStringLen
VariantCopy
SafeArrayCreate
SafeArrayPutElement
Sections
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE