Static task
static1
Behavioral task
behavioral1
Sample
2cf2898fbec1a56142bc35a3f896b79373717fc738a4cbf27fa0ce0708dba9ce.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2cf2898fbec1a56142bc35a3f896b79373717fc738a4cbf27fa0ce0708dba9ce.exe
Resource
win10v2004-20220812-en
General
-
Target
2cf2898fbec1a56142bc35a3f896b79373717fc738a4cbf27fa0ce0708dba9ce
-
Size
676KB
-
MD5
1440c1401c26e5c92c19b772fc0f114c
-
SHA1
182faf7bf5fe4597944ebed49175be3792c0f30f
-
SHA256
2cf2898fbec1a56142bc35a3f896b79373717fc738a4cbf27fa0ce0708dba9ce
-
SHA512
bbc76f7d26e978bbed433c31f4aeaa477142e8aa5d1e82ea9e56097b0b7ea97bc3753313ec4b8e86926b80ea9383dd1ca5d8990fc9c55c69ae057305d0a393ef
-
SSDEEP
6144:RJCU4BbRR3WuTrNQRLgq1vc0Uvrx4OoK9bxDbqzUte72f9yKeMz6eILlp6Ykn8Ag:mDVniCY2vOpaDbqzUs6f9yIQwYikSg
Malware Config
Signatures
Files
-
2cf2898fbec1a56142bc35a3f896b79373717fc738a4cbf27fa0ce0708dba9ce.exe windows x86
9ee63159d71dd60f658c90d8e6813d75
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
GetLastError
SetEvent
CreateEventA
GetFileAttributesA
GetDriveTypeA
GetLogicalDrives
SetPriorityClass
GetCurrentProcess
ReleaseSemaphore
CreateSemaphoreA
lstrcmpA
GetSystemTimeAsFileTime
GetModuleHandleA
GlobalReAlloc
MultiByteToWideChar
SystemTimeToFileTime
GetPrivateProfileStructA
WideCharToMultiByte
GetACP
lstrlenA
WritePrivateProfileStructA
MulDiv
lstrlenW
GetCurrentThreadId
GlobalUnlock
GlobalLock
InterlockedIncrement
InterlockedDecrement
FlushInstructionCache
GetCurrentThread
SetThreadPriority
CreateThread
WaitForSingleObject
CloseHandle
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
GlobalAlloc
ExitProcess
GetFullPathNameA
TerminateThread
FindNextFileA
lstrcpynA
CreateFileA
GetTempFileNameA
MoveFileA
WriteFile
ReadFile
SetFilePointer
GetProcAddress
SetEndOfFile
LoadLibraryA
EnterCriticalSection
FreeLibrary
LeaveCriticalSection
CreateDirectoryA
DeleteCriticalSection
InitializeCriticalSection
Sleep
FindFirstFileA
FindClose
lstrcmpiA
GetTickCount
CreateProcessA
GetPrivateProfileIntA
DeleteFileA
GetTempPathA
WritePrivateProfileStringA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetPrivateProfileStringA
HeapDestroy
GetSystemTime
GetCPInfo
GetCommandLineA
GetStartupInfoA
RtlUnwind
HeapCreate
GetOEMCP
HeapFree
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
HeapAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GlobalFree
GetVersion
VirtualFree
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
RaiseException
user32
SetFocus
GetFocus
FillRect
GetSysColor
GetWindowTextLengthA
RedrawWindow
CreateAcceleratorTableA
InvalidateRgn
PeekMessageA
SetDlgItemTextA
GetClassNameA
MessageBoxA
ReleaseCapture
GetCursorPos
EnableWindow
EndDialog
LoadCursorA
SetCursor
SetWindowLongA
GetWindowLongA
DialogBoxParamA
ClientToScreen
GetSubMenu
TrackPopupMenu
SetCapture
GetWindow
CallWindowProcA
BeginPaint
EndPaint
GetForegroundWindow
LoadBitmapA
FindWindowA
SystemParametersInfoA
GetClientRect
GetWindowDC
ReleaseDC
LoadImageA
SetTimer
GetWindowTextA
wsprintfA
GetClassInfoExA
KillTimer
DestroyWindow
GetDlgItem
GetWindowRect
ScreenToClient
SetWindowPos
InvalidateRect
SendMessageA
GetDlgItemTextA
DrawTextA
SetForegroundWindow
DefWindowProcA
CharNextA
RegisterClassExA
CreateDialogParamA
ShowWindow
SetClassLongA
IsDlgButtonChecked
CheckDlgButton
CreatePopupMenu
DestroyMenu
FindWindowExA
PostQuitMessage
IsWindowVisible
UpdateWindow
LoadMenuA
GetSystemMenu
InsertMenuA
GetMenuItemInfoA
InsertMenuItemA
GetAsyncKeyState
CreateWindowExA
LoadIconA
RegisterClassA
GetClassInfoA
RegisterWindowMessageA
LoadStringA
LoadAcceleratorsA
GetMessageA
IsDialogMessageA
IsChild
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CharPrevA
DestroyIcon
SetWindowRgn
wvsprintfA
PostMessageA
GetDlgItemInt
SetDlgItemInt
CheckRadioButton
DrawIconEx
IsWindow
SetWindowTextA
GetDC
GetParent
SendDlgItemMessageA
CheckMenuItem
GetUpdateRect
RemoveMenu
SetCursorPos
gdi32
SetBkMode
MoveToEx
UpdateColors
LineTo
RealizePalette
SelectPalette
BitBlt
CreatePalette
DeleteObject
CreateDIBSection
GetDIBColorTable
GetDIBits
DeleteDC
CreateCompatibleDC
GetDeviceCaps
SelectObject
GetTextMetricsA
CreateFontA
SetBkColor
CreateCompatibleBitmap
StretchBlt
SetMapMode
GetNearestColor
GetPixel
CreateBrushIndirect
Rectangle
IntersectClipRect
ExtSelectClipRgn
CreatePen
TextOutA
GetStockObject
CreatePolyPolygonRgn
CreateRectRgn
CreateSolidBrush
SetTextColor
advapi32
RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyA
shell32
Shell_NotifyIconA
SHGetMalloc
DragQueryPoint
DragQueryFileA
DragFinish
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
SHFileOperationA
comctl32
ord17
ole32
OleLockRunning
CoTaskMemAlloc
StringFromCLSID
CLSIDFromString
CLSIDFromProgID
OleUninitialize
OleInitialize
CoTaskMemFree
CreateStreamOnHGlobal
CoCreateGuid
CoCreateInstance
CoInitialize
CoUninitialize
winmm
mciSendCommandA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
oleaut32
LoadRegTypeLi
SysStringLen
SysAllocStringLen
VariantClear
SysFreeString
SysAllocString
Sections
.text Size: 256KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 368KB - Virtual size: 367KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ