Static task
static1
Behavioral task
behavioral1
Sample
c02ac86243c29b574f8cbda905319218776549558d279e4acfd34134afe5a59b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c02ac86243c29b574f8cbda905319218776549558d279e4acfd34134afe5a59b.exe
Resource
win10v2004-20220901-en
General
-
Target
c02ac86243c29b574f8cbda905319218776549558d279e4acfd34134afe5a59b
-
Size
170KB
-
MD5
3e7cfa25a8aec586158504604241e4da
-
SHA1
3f91c5cadbc2a10602d766d67a4c8aced4f22232
-
SHA256
c02ac86243c29b574f8cbda905319218776549558d279e4acfd34134afe5a59b
-
SHA512
1297d045dc8660e795ac303862a6ab4438c134f491bebe2c60e5d6c97674b84fb84b1c7771de5bb234131509ff6a5c8b91ff3756037da9179227364989eb2b7d
-
SSDEEP
3072:JFw+U6W5n6KQGU48WLyvTdhYhJX0Q8NK7gJ35ApPo4n9:dPivFLIZoeugvgo+
Malware Config
Signatures
Files
-
c02ac86243c29b574f8cbda905319218776549558d279e4acfd34134afe5a59b.exe windows x86
3f842f840ed1a6e4d7db514aa3cd1f15
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msimg32
AlphaBlend
TransparentBlt
setupapi
InstallCatalog
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
winmm
mciSendCommandA
sndPlaySoundA
shlwapi
PathAddBackslashA
kernel32
IsDBCSLeadByte
GetAtomNameW
FileTimeToSystemTime
CreateThread
GetTempPathA
ResetEvent
LeaveCriticalSection
Sleep
OutputDebugStringA
SetEvent
LoadLibraryW
EnumResourceNamesA
GetTickCount
WaitForSingleObject
QueryMemoryResourceNotification
EnterCriticalSection
GetTimeZoneInformation
GetProcAddress
lstrcpyA
GetFullPathNameA
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryA
GetFullPathNameW
FreeLibrary
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ