Static task
static1
Behavioral task
behavioral1
Sample
c2c1a9cc8808ca7644c590dfb5971fc306fbc2748a0892111e517aa593f516fe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c2c1a9cc8808ca7644c590dfb5971fc306fbc2748a0892111e517aa593f516fe.exe
Resource
win10v2004-20221111-en
General
-
Target
c2c1a9cc8808ca7644c590dfb5971fc306fbc2748a0892111e517aa593f516fe
-
Size
560KB
-
MD5
b7963d2630d7f0d6c13be443e77dd243
-
SHA1
5bf0aef4cc1363c40993f3b9db89f9f6fc12eab8
-
SHA256
c2c1a9cc8808ca7644c590dfb5971fc306fbc2748a0892111e517aa593f516fe
-
SHA512
a57c620631ca5ff71d9991e86cd0dba7b6308439eb880096bc7748cf587e4c82eb53952e0ebc964748cdbf63d7f51055dddd9bc9e35fe155d1b48ce2475ca2f6
-
SSDEEP
12288:fXceUhQYG1Z4RuxpFYGq6Z6uQhdMTFNavzUTBcG:9QQYCZ1xXYyIuQhdMhNavzScG
Malware Config
Signatures
Files
-
c2c1a9cc8808ca7644c590dfb5971fc306fbc2748a0892111e517aa593f516fe.exe windows x86
4582ffdd7eb98cb63a937096204182b7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xcpad Size: - Virtual size: 848KB
.idata Size: 1024B - Virtual size: 626B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ