Static task
static1
Behavioral task
behavioral1
Sample
cd9b36bcd6164947735843b5b6e1bca076730d330b48c7a7587074d64dc51579.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cd9b36bcd6164947735843b5b6e1bca076730d330b48c7a7587074d64dc51579.exe
Resource
win10v2004-20221111-en
General
-
Target
cd9b36bcd6164947735843b5b6e1bca076730d330b48c7a7587074d64dc51579
-
Size
255KB
-
MD5
6a6b67f330c39017562045ebaad6eac2
-
SHA1
631231ebe73eee644c78fe55ae6482d50b07ef13
-
SHA256
cd9b36bcd6164947735843b5b6e1bca076730d330b48c7a7587074d64dc51579
-
SHA512
eaf48ece287a8c07edd52482f5011ef341418b7c8c553d89961f9e0693486c50b96b99d000ee7571d10e2c925a832f5dfc76d627dc4d423a8916ec7600a5503e
-
SSDEEP
3072:ARA51Jvbg5LJBZslwusNZwlzJrGm/Z9tw8yPd9TAuOtBmzOOGiL+E5PQOwAOq6ZE:hSHZslplVDZPO9TxOyVLBK3q6gyD
Malware Config
Signatures
Files
-
cd9b36bcd6164947735843b5b6e1bca076730d330b48c7a7587074d64dc51579.exe windows x86
50e2b7c1364ad5fd75a517961464d4e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
lstrcatA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
ExitProcess
GetCurrentProcess
CopyFileA
lstrcpynA
GetCommandLineA
GetWindowsDirectoryA
CloseHandle
GetUserDefaultLangID
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
GlobalAlloc
CreateThread
CreateProcessA
CreateFileA
GetTempFileNameA
lstrcpyA
lstrlenA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetSystemDirectoryA
RemoveDirectoryA
lstrcmpA
GetVolumeInformationA
InterlockedExchange
RtlUnwind
lstrcmpiA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
VirtualQuery
WriteFile
ReadFile
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA
MulDiv
user32
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuA
CreatePopupMenu
GetSystemMetrics
EndDialog
SetWindowPos
SetClassLongA
IsWindowEnabled
DialogBoxParamA
LoadBitmapA
GetClassInfoA
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
LoadCursorA
GetWindowLongA
GetSysColor
CharNextA
ExitWindowsEx
CreateDialogParamA
DestroyWindow
SetTimer
SetCursor
IsWindowVisible
CallWindowProcA
GetMessagePos
ScreenToClient
CheckDlgButton
RegisterClassA
SetWindowTextA
wsprintfA
SetForegroundWindow
ShowWindow
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
SetWindowLongA
GetClientRect
LoadImageA
GetDC
EnableWindow
PeekMessageA
DispatchMessageA
SendMessageA
InvalidateRect
PostQuitMessage
gdi32
SetTextColor
SetBkMode
SetBkColor
CreateBrushIndirect
DeleteObject
CreateFontIndirectA
GetDeviceCaps
shell32
SHFileOperationA
SHGetSpecialFolderLocation
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
advapi32
RegEnumValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
ord17
ole32
OleInitialize
CoCreateInstance
OleUninitialize
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
snmpapi
SnmpUtilOidCpy
SnmpUtilOidNCmp
SnmpUtilVarBindFree
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsro Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tc Size: 194KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE