Static task
static1
Behavioral task
behavioral1
Sample
c05e54ef9a9d110dd68a724d16f84ea73d3f5f0294ba903ea632921c928300a3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c05e54ef9a9d110dd68a724d16f84ea73d3f5f0294ba903ea632921c928300a3.exe
Resource
win10v2004-20221111-en
General
-
Target
c05e54ef9a9d110dd68a724d16f84ea73d3f5f0294ba903ea632921c928300a3
-
Size
49KB
-
MD5
6549acf92a79b1bdaa99c7915c621d7f
-
SHA1
b728d2d8dbd80a8a98b25f6e696024fd4097ac0d
-
SHA256
c05e54ef9a9d110dd68a724d16f84ea73d3f5f0294ba903ea632921c928300a3
-
SHA512
8d31ae5cfe047f599d54b1ad3197fd58c8cb656139ed848274dda2a6c67dfa08832a537a685634fc8f456d2951469b5a2cc7a31c95fb5f490a2cc887c4b02be0
-
SSDEEP
768:hX045XeI+omcWJgnm6WjOMG8PeJ0q+G9I:1zeIzEJgm6WjOMG8PeJ0q+8I
Malware Config
Signatures
Files
-
c05e54ef9a9d110dd68a724d16f84ea73d3f5f0294ba903ea632921c928300a3.exe windows x86
93089d8b92a2d07f83005bef314a4ec9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_llseek
WriteConsoleOutputCharacterA
_lread
PurgeComm
IsDebuggerPresent
GetConsoleAliasExesA
ReplaceFileW
CallNamedPipeA
UnlockFileEx
GetLongPathNameW
GetShortPathNameA
RegisterConsoleOS2
RegisterWaitForSingleObjectEx
VirtualProtect
GetEnvironmentVariableA
SetStdHandle
RegisterWaitForInputIdle
PulseEvent
GetCommandLineW
GetPrivateProfileSectionW
SetConsolePalette
VirtualLock
GlobalMemoryStatus
TryEnterCriticalSection
SetHandleInformation
SetVolumeLabelW
BackupSeek
GetOEMCP
RtlFillMemory
IsBadReadPtr
GetDefaultCommConfigW
FatalAppExitW
GlobalCompact
HeapAlloc
Heap32Next
CreateMailslotA
CreateMailslotW
HeapCreate
MultiByteToWideChar
GetNamedPipeHandleStateA
TlsFree
Thread32First
IsBadStringPtrA
GetCurrentThreadId
WritePrivateProfileStructA
gdi32
GetEnhMetaFilePaletteEntries
SetAbortProc
EngDeletePath
GdiGetPageCount
CLIPOBJ_bEnum
GetTextExtentExPointI
EnumFontFamiliesExA
GdiResetDCEMF
ModifyWorldTransform
DrawEscape
SetMapperFlags
GetDCOrgEx
GdiEndDocEMF
SetMapMode
GdiAlphaBlend
GetGlyphOutline
GdiGetBatchLimit
RemoveFontMemResourceEx
EngFillPath
EngStretchBlt
DeleteMetaFile
GdiConvertPalette
LineTo
GetClipRgn
EnumMetaFile
GetEnhMetaFileW
GetOutlineTextMetricsA
GetKerningPairs
GetAspectRatioFilterEx
PolyBezierTo
user32
ChangeMenuA
GetNextDlgGroupItem
SendIMEMessageExA
TranslateMessageEx
ScrollWindowEx
GetDlgItemInt
MessageBoxIndirectA
IsChild
SetSystemCursor
GetCursorFrameInfo
AttachThreadInput
GetAsyncKeyState
GetDC
EnumDesktopsW
LoadMenuIndirectW
GetDlgCtrlID
SetClipboardViewer
MsgWaitForMultipleObjectsEx
BeginDeferWindowPos
CharUpperA
CopyImage
GetCursorInfo
UserRealizePalette
GetWindowModuleFileNameA
OemKeyScan
IntersectRect
DrawFrameControl
EnumDesktopsA
GetWindowPlacement
LookupIconIdFromDirectoryEx
BringWindowToTop
DefWindowProcA
ReleaseCapture
PrivateExtractIconExA
GetIconInfo
SwitchToThisWindow
MapVirtualKeyW
DialogBoxIndirectParamW
FrameRect
CreateWindowExA
UnhookWindowsHook
GetClipboardFormatNameW
CharLowerW
EmptyClipboard
LoadCursorFromFileW
SetWindowTextW
TileChildWindows
GetWindowInfo
GetCursor
FindWindowW
ole32
CreateDataAdviseHolder
CoImpersonateClient
MonikerCommonPrefixWith
CoEnableCallCancellation
HBRUSH_UserFree
CoRegisterSurrogateEx
HGLOBAL_UserUnmarshal
CoFreeUnusedLibraries
OleConvertIStorageToOLESTREAM
HPALETTE_UserFree
CoDisconnectObject
OleSave
HGLOBAL_UserFree
CreatePointerMoniker
OleTranslateAccelerator
IsEqualGUID
HICON_UserMarshal
CoGetTreatAsClass
CoQueryProxyBlanket
PropSysFreeString
ReadClassStm
CoUninitialize
CoDosDateTimeToFileTime
CoCreateFreeThreadedMarshaler
UtConvertDvtd32toDvtd16
HMENU_UserMarshal
UtGetDvtd32Info
StgCreateDocfileOnILockBytes
SetDocumentBitStg
UpdateDCOMSettings
oleacc
WindowFromAccessibleObject
AccessibleObjectFromEvent
GetStateTextW
IID_IAccessibleHandler
GetStateTextA
CreateStdAccessibleObject
GetRoleTextW
AccessibleObjectFromPoint
GetRoleTextA
ObjectFromLresult
Sections
.text Size: 27KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ctext Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 188B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ