Static task
static1
Behavioral task
behavioral1
Sample
c3c152f6ccf2c7d1d67af345fe3bded4cb8cc599131c9019111b3b7696c8173d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c3c152f6ccf2c7d1d67af345fe3bded4cb8cc599131c9019111b3b7696c8173d.exe
Resource
win10v2004-20220901-en
General
-
Target
c3c152f6ccf2c7d1d67af345fe3bded4cb8cc599131c9019111b3b7696c8173d
-
Size
17KB
-
MD5
14ad53ad498865f422185ff4b2ac0490
-
SHA1
4496a525291274ac32b7633c3e430a77145477a7
-
SHA256
c3c152f6ccf2c7d1d67af345fe3bded4cb8cc599131c9019111b3b7696c8173d
-
SHA512
c8459157f7b7f4949da65a0ada08b9747f9aa15c125deb686bd65b23cb60f81f92b825cc2edec4cd02a8a7772aec4fcd44c66268394a95ea52d2466c6d4a297e
-
SSDEEP
384:wXmB2HYg9xg5JoTX61zKAhP7gTgpGwlncQ6rExBU:wWBg9xg2TX8zK0Pmgp1JcQoO6
Malware Config
Signatures
Files
-
c3c152f6ccf2c7d1d67af345fe3bded4cb8cc599131c9019111b3b7696c8173d.exe windows x86
7315e76a2235c57e6e880bf7b1e359b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
SetLastError
DeleteFileA
GetShortPathNameA
GetModuleFileNameA
GetFileAttributesA
lstrlenA
lstrcpyA
GetLastError
CreateFileA
WriteFile
CloseHandle
GetModuleHandleA
GetProcAddress
lstrcatA
GetCurrentProcess
GetStartupInfoA
user32
wsprintfA
advapi32
StartServiceA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
CreateServiceA
RegCreateKeyA
RegSetValueExA
CloseServiceHandle
OpenServiceA
RegOpenKeyExA
shell32
ShellExecuteA
msvcrt
_controlfp
_except_handler3
??2@YAPAXI@Z
strchr
__CxxFrameHandler
_CxxThrowException
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE