Static task
static1
Behavioral task
behavioral1
Sample
c471f79791f24c2c8f6f9e47681362cc7bba3cfaebcf353b4af493e100c993df.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c471f79791f24c2c8f6f9e47681362cc7bba3cfaebcf353b4af493e100c993df.exe
Resource
win10v2004-20220812-en
General
-
Target
c471f79791f24c2c8f6f9e47681362cc7bba3cfaebcf353b4af493e100c993df
-
Size
553KB
-
MD5
ca87541b803fd5bf36091890222e34fc
-
SHA1
2a9e007ae405cda2b54dedba01b98a5fd5e185a2
-
SHA256
c471f79791f24c2c8f6f9e47681362cc7bba3cfaebcf353b4af493e100c993df
-
SHA512
a21fa8b98d23cfbc07a83b3712ddac68a18f53994c42024c8848d02b6771311a2795ed05e8b684336d4c3461a9504bbe4b80618f327488c896456223cb235b52
-
SSDEEP
12288:ERgH6a+ai6xUfxVimX5FvhYHfwATLlWLfC+wZO:ER26aw6oxV5X/5KfwiQfC+wZO
Malware Config
Signatures
Files
-
c471f79791f24c2c8f6f9e47681362cc7bba3cfaebcf353b4af493e100c993df.exe windows x86
ea6405622299546bbf7bf2c93c78f02e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawTextExA
RegisterClassExA
GetDlgItemTextW
ReuseDDElParam
MonitorFromRect
SwapMouseButton
RemovePropA
DialogBoxIndirectParamW
CharUpperA
RegisterClassA
WindowFromDC
GetSubMenu
OemToCharA
DrawEdge
comctl32
InitCommonControlsEx
kernel32
LCMapStringW
FlushFileBuffers
GetProcessHeap
WriteFile
FreeEnvironmentStringsA
SetEnvironmentVariableA
ReadConsoleInputA
HeapAlloc
EnumSystemLocalesA
InterlockedDecrement
CloseHandle
GetVersionExA
RaiseException
GetLocaleInfoA
LCMapStringA
FindResourceW
HeapDestroy
CompareStringW
VirtualAlloc
QueryPerformanceCounter
GetLastError
FormatMessageA
GetCPInfo
GetShortPathNameA
GetFileType
GetConsoleCP
GetCurrentProcessId
SetUnhandledExceptionFilter
FindNextFileW
VirtualQuery
EnterCriticalSection
GetStartupInfoA
FreeEnvironmentStringsW
SetHandleCount
LoadLibraryA
GetTimeFormatA
GetLocaleInfoW
MultiByteToWideChar
IsDebuggerPresent
GetCurrentThread
VirtualFree
GetCurrentProcess
GetCommandLineA
GetEnvironmentStringsW
GetOEMCP
FlushInstructionCache
CreateFileA
LeaveCriticalSection
GetThreadPriority
DebugActiveProcess
GetStdHandle
TlsAlloc
CreateMutexA
GetModuleFileNameA
GetTimeZoneInformation
GetConsoleOutputCP
InterlockedIncrement
TerminateProcess
HeapReAlloc
MapViewOfFileEx
Sleep
IsValidLocale
WriteConsoleA
IsValidCodePage
InterlockedExchange
GetModuleHandleA
TlsFree
TlsSetValue
GetFileAttributesExW
WideCharToMultiByte
GetUserDefaultLCID
GetTickCount
RtlUnwind
GetProcAddress
OpenWaitableTimerW
InitializeCriticalSection
CompareStringA
WriteConsoleW
OpenMutexA
GetDateFormatA
SetLastError
DeleteCriticalSection
TryEnterCriticalSection
SetConsoleCP
GlobalLock
UnhandledExceptionFilter
SetConsoleCtrlHandler
ReadConsoleW
TlsGetValue
FileTimeToLocalFileTime
GetFileAttributesA
ExitProcess
FreeLibrary
SetFileAttributesA
GetConsoleMode
SetStdHandle
HeapCreate
GetStringTypeW
SetFilePointer
GetSystemTimeAsFileTime
HeapFree
ReadFile
GetCurrentThreadId
GetStringTypeA
HeapSize
GetACP
GetEnvironmentStrings
Sections
.text Size: 207KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ