Static task
static1
Behavioral task
behavioral1
Sample
1c2caa3cee2a22de2afc414453d79bf48457436bb1c4dfd70dc0861edffbbc94.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1c2caa3cee2a22de2afc414453d79bf48457436bb1c4dfd70dc0861edffbbc94.exe
Resource
win10v2004-20220812-en
General
-
Target
1c2caa3cee2a22de2afc414453d79bf48457436bb1c4dfd70dc0861edffbbc94
-
Size
90KB
-
MD5
80d2968918031589767c344133321fb9
-
SHA1
0dff86e4bdb69ddae6b08695f696dfacbc51e8be
-
SHA256
1c2caa3cee2a22de2afc414453d79bf48457436bb1c4dfd70dc0861edffbbc94
-
SHA512
5db45cce1911d50b078f5999ae10cb975de5dd9c1d4e18b9be836093d4c6d95f8bb9f639f10eb6cd936b74581ed6d08a8dafe47e1bd4bca55d7b2f01db23d29b
-
SSDEEP
1536:rDLOD7Gw1n5F6PJCy05h4TkoCm6cshr1D:3QGAYCywhqQtcshrx
Malware Config
Signatures
Files
-
1c2caa3cee2a22de2afc414453d79bf48457436bb1c4dfd70dc0861edffbbc94.exe windows x86
c55bf8ace4f0cbef71ad8b2a5bf0afa7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oledlg
OleUIPasteSpecialW
OleUIConvertW
ord5
kernel32
TlsSetValue
IsValidLocale
WriteConsoleA
HeapValidate
GetPrivateProfileSectionNamesW
GetVolumeInformationW
SearchPathW
GetPrivateProfileStructA
EraseTape
GetCommandLineA
HeapSetInformation
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
Sleep
WriteConsoleW
MultiByteToWideChar
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CompareStringW
SetEnvironmentVariableA
LoadLibraryW
HeapAlloc
HeapReAlloc
CreateFileW
CloseHandle
GetStringTypeW
IsProcessorFeaturePresent
LCMapStringW
HeapSize
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zaovewu Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE