Static task
static1
Behavioral task
behavioral1
Sample
c0955e935ba87aba2bec49e080227172b6ae6ed699c4f2753b12b48c78718211.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c0955e935ba87aba2bec49e080227172b6ae6ed699c4f2753b12b48c78718211.exe
Resource
win10v2004-20220812-en
General
-
Target
c0955e935ba87aba2bec49e080227172b6ae6ed699c4f2753b12b48c78718211
-
Size
196KB
-
MD5
17db983cbeefd107dbbf876b38a0b543
-
SHA1
05377d74b373300fae91943dff866aaceec598c2
-
SHA256
c0955e935ba87aba2bec49e080227172b6ae6ed699c4f2753b12b48c78718211
-
SHA512
98a31dcf6b0c8f933099a2dc2999cc7ebb75354fd2d9b1dbdb779265af115d29e391a6db2e03dbaaa8edbb518264a3422c8f3af38c2933e9d6de15a90cc97daa
-
SSDEEP
3072:jZUZUNmx1JsaMDJbczvcWiMcY36dNAXQeln/HYRvdfDTua9BvbeIhmZmC:j2QmxEaHo7Mt3iGr/HY76IxhC
Malware Config
Signatures
Files
-
c0955e935ba87aba2bec49e080227172b6ae6ed699c4f2753b12b48c78718211.exe windows x86
3875615c653572593ad1b526a45c5e59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateFiberEx
FindResourceExA
SetEndOfFile
FlushFileBuffers
GetUserDefaultLangID
SetCommConfig
GetFileAttributesA
GetFileType
UnlockFile
GetVersionExW
VerLanguageNameW
EnumResourceNamesW
CompareStringW
GetVolumeInformationW
LockFile
FlushFileBuffers
IsDBCSLeadByte
GetSystemTime
GetProfileStringW
FileTimeToSystemTime
LocalAlloc
GetFileTime
SearchPathW
FileTimeToLocalFileTime
GetSystemDirectoryW
comctl32
ImageList_DrawEx
ImageList_Add
ImageList_GetIconSize
ImageList_Create
ImageList_Destroy
rpcrt4
RpcStringBindingComposeA
NdrClientCall
RpcBindingFromStringBindingA
RpcBindingSetAuthInfoA
RpcStringFreeA
shlwapi
PathCanonicalizeW
PathIsRelativeW
PathIsRootW
PathStripToRootW
PathIsURLW
PathCombineW
gdi32
CreatePen
CreateFontIndirectA
StrokePath
SetTextColor
GetBkColor
ExtCreatePen
PlgBlt
RoundRect
AnimatePalette
PolyBezier
SetStretchBltMode
FlattenPath
GetBitmapBits
GetPath
SetDIBits
user32
IsClipboardFormatAvailable
ClipCursor
DestroyIcon
DefWindowProcW
DrawEdge
UnhookWindowsHookEx
SetWindowPos
EmptyClipboard
WinHelpW
ChildWindowFromPoint
MonitorFromWindow
DestroyCursor
RegisterClassW
SetClipboardData
CallNextHookEx
SetWindowsHookExW
SetScrollRange
GetSysColorBrush
ToAscii
GetSysColor
comdlg32
GetFileTitleA
ole32
GetHGlobalFromStream
RegisterDragDrop
ProgIDFromCLSID
CLSIDFromString
CoFreeUnusedLibraries
OleRun
CoCreateInstance
CreateStreamOnHGlobal
CoCreateGuid
CLSIDFromProgID
CoTaskMemAlloc
ReleaseStgMedium
CoGetClassObject
OleGetAutoConvert
StringFromCLSID
GetHGlobalFromILockBytes
StgOpenStorageOnILockBytes
CoTaskMemFree
RevokeDragDrop
CoGetMalloc
OleRegGetUserType
OleDuplicateData
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
Sections
.text Size: 167KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lib Size: 512B - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ