Static task
static1
Behavioral task
behavioral1
Sample
c23bbf201b3b44ebdded63ad4e5c3fc8aef73baefb86cfe36e791bb33bd0d38d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c23bbf201b3b44ebdded63ad4e5c3fc8aef73baefb86cfe36e791bb33bd0d38d.exe
Resource
win10v2004-20220812-en
General
-
Target
c23bbf201b3b44ebdded63ad4e5c3fc8aef73baefb86cfe36e791bb33bd0d38d
-
Size
354KB
-
MD5
7868d9cef64cc2da8671d5fcbd7a8880
-
SHA1
b270d7c25618e7d338470502f732dc6d95d1590f
-
SHA256
c23bbf201b3b44ebdded63ad4e5c3fc8aef73baefb86cfe36e791bb33bd0d38d
-
SHA512
03dc1bdd32efb0f724cc5dd185aac019f62db036e4dbeb67f5b1c463b400a4bf0e2601eb596e630937c536b9001b2457273ff636430cf8f30161fcd4ca85c1bd
-
SSDEEP
6144:h3OyV640Pw05XhGtTWHXBHW8ketq8ffZ3gC4pcrrrjaokGmZED709HiCPezwZb91:4y04xwx3BW8keBQDQvk5ED70piubs2
Malware Config
Signatures
Files
-
c23bbf201b3b44ebdded63ad4e5c3fc8aef73baefb86cfe36e791bb33bd0d38d.exe windows x86
6103e1b3ad3bc890de1f2171d01e2d7d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
gdi32
StartPage
EndDoc
GetTextFaceW
CreateDCW
CreateFontIndirectW
TextOutW
SetWindowExtEx
StartDocW
DeleteObject
GetObjectW
EndPage
LPtoDP
DeleteDC
SelectObject
GetDeviceCaps
SetBkMode
SetAbortProc
GetTextMetricsW
GetTextExtentPoint32W
EnumFontsW
SetMapMode
SetViewportExtEx
GetStockObject
AbortDoc
msvcrt
exit
wcsncpy
?terminate@@YAXXZ
__set_app_type
_snwprintf
wcschr
_controlfp
_CxxThrowException
__p__fmode
localtime
_cexit
_vsnprintf
_adjust_fdiv
_wcsicmp
__setusermatherr
_XcptFilter
??2@YAPAXI@Z
wcsncmp
_purecall
_initterm
??1type_info@@UAE@XZ
memcpy
_amsg_exit
_c_exit
_wtol
_onexit
iswctype
__p__commode
__getmainargs
time
_acmdln
_exit
user32
UpdateWindow
GetFocus
OpenClipboard
CheckMenuItem
GetMenuState
CharLowerW
SendMessageW
UnhookWinEvent
DrawTextA
MessageBoxW
PeekMessageW
GetClientRect
SetWindowLongW
SetCapture
ChildWindowFromPoint
SetPropW
LoadAcceleratorsW
GetDC
GetSystemMenu
IsDialogMessageW
TranslateAcceleratorW
WinHelpW
EnableMenuItem
IsWindowEnabled
SetWindowTextW
RegisterWindowMessageW
CharUpperW
MessageBoxA
DestroyWindow
MessageBeep
GetDesktopWindow
InvalidateRect
ScreenToClient
SendDlgItemMessageW
PeekMessageA
GetWindowPlacement
PostQuitMessage
GetSystemMetrics
CloseClipboard
FindWindowW
RegisterClassExW
LoadCursorW
LoadStringW
MoveWindow
GetKeyboardLayout
GetWindowTextA
DestroyIcon
GetDlgItemTextW
IsDialogMessageA
DispatchMessageW
EndDialog
SetFocus
CreateWindowExW
ReleaseDC
KillTimer
SetCursor
DestroyMenu
GetDlgCtrlID
LoadImageW
CreateDialogParamW
DrawTextExW
GetCursorPos
CharNextW
LoadIconW
IsIconic
GetWindowTextW
PostMessageA
GetWindowLongW
PostMessageW
ClientToScreen
GetMessageW
DeleteMenu
ShowWindow
GetSubMenu
TranslateMessage
GetParent
SetWindowPlacement
MapWindowPoints
DefWindowProcW
SetWinEventHook
GetSysColorBrush
IsClipboardFormatAvailable
GetWindowThreadProcessId
GetForegroundWindow
DialogBoxParamW
OffsetRect
RedrawWindow
GetDlgItem
UnhookWindowsHookEx
SetDlgItemTextW
GetWindowRect
SetActiveWindow
SetScrollPos
wsprintfW
SetWindowLongA
GetMenu
EnableWindow
shell32
DragAcceptFiles
ShellAboutW
DragFinish
DragQueryFileW
kernel32
QueryPerformanceCounter
lstrcpyW
TerminateProcess
FindFirstFileW
DeleteCriticalSection
GetACP
FindClose
GetEnvironmentStrings
SetEvent
MulDiv
TlsAlloc
GetModuleFileNameA
GlobalLock
WriteConsoleW
LocalUnlock
SetEndOfFile
SizeofResource
WaitForSingleObject
GetEnvironmentStringsW
DeviceIoControl
FindResourceA
ExpandEnvironmentStringsW
lstrcmpiW
HeapSize
SetFileAttributesW
VirtualQuery
lstrcatW
CloseHandle
lstrcmpW
LocalReAlloc
TlsGetValue
GetModuleFileNameW
RtlUnwind
SetLastError
HeapFree
GetTempPathW
GetCurrentThreadId
GetVersionExA
VirtualFree
GetExitCodeProcess
VirtualProtect
FreeResource
TlsSetValue
ReleaseSemaphore
GetOEMCP
GetLocaleInfoW
InterlockedDecrement
GetFileAttributesW
DisableThreadLibraryCalls
GlobalFree
InitializeCriticalSection
SetUnhandledExceptionFilter
ExitProcess
GetModuleHandleA
HeapReAlloc
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
HeapAlloc
lstrlenW
GetProcAddress
GlobalReAlloc
GetLocalTime
RaiseException
GetUserDefaultLCID
LCMapStringA
GetCommandLineW
LeaveCriticalSection
GetLastError
ReleaseMutex
lstrcpynW
GetCPInfo
GetStartupInfoA
HeapDestroy
FreeLibrary
GetEnvironmentVariableW
GetCurrentProcessId
LoadLibraryA
SetStdHandle
InterlockedExchange
FlushInstructionCache
GetFileInformationByHandle
CreateDirectoryW
GetTimeFormatW
lstrlenA
LocalLock
MapViewOfFile
IsDebuggerPresent
ReadFile
GetSystemTimeAsFileTime
GetLocaleInfoA
FoldStringW
DebugBreak
GetTimeZoneInformation
GetTickCount
CreateFileW
GetUserDefaultUILanguage
FormatMessageA
GetStartupInfoW
UnmapViewOfFile
GlobalUnlock
LocalFree
CompareStringW
GetCurrentProcess
LocalAlloc
FreeEnvironmentStringsW
WriteFile
GetStringTypeA
FormatMessageW
UnhandledExceptionFilter
LoadResource
CreateFileMappingW
IsDBCSLeadByte
GetThreadLocale
GetFileType
VirtualAlloc
LocalSize
GetDateFormatW
DeleteFileW
comdlg32
PageSetupDlgW
GetSaveFileNameW
PrintDlgExW
CommDlgExtendedError
GetOpenFileNameW
FindTextW
ReplaceTextW
GetFileTitleW
ChooseFontW
winspool.drv
GetPrinterDriverW
OpenPrinterW
ClosePrinter
advapi32
RegOpenKeyExA
RegCreateKeyW
RegSetValueExW
IsTextUnicode
RegQueryValueExA
RegQueryValueExW
RegCloseKey
comctl32
CreateStatusWindowW
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 281KB - Virtual size: 743KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ