Static task
static1
Behavioral task
behavioral1
Sample
c416411facae678117b7118ca431c42095856bc98101f3623d44e946bedeae2c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c416411facae678117b7118ca431c42095856bc98101f3623d44e946bedeae2c.exe
Resource
win10v2004-20221111-en
General
-
Target
c416411facae678117b7118ca431c42095856bc98101f3623d44e946bedeae2c
-
Size
43KB
-
MD5
f0cdbbf32dfa39582d170ad5c27273a8
-
SHA1
34d27797ab8fc07ae1e7e00578224ad4894d7c8f
-
SHA256
c416411facae678117b7118ca431c42095856bc98101f3623d44e946bedeae2c
-
SHA512
5dba86ac94493bd354f0794c0bb22cf5f51729c616fe44b6b98f119ff3713fd973e927a292c2874c5084f13964cf3e8d8acfc7d5c7d28ebaf53245fad1ef8368
-
SSDEEP
768:2Wa7UlN/OMl5uf5RP5Y5R4+Jmnv5RGyIBJ:2bUlp/lgf5RxY5RFJmnv5RGyIv
Malware Config
Signatures
Files
-
c416411facae678117b7118ca431c42095856bc98101f3623d44e946bedeae2c.exe windows x86
b089cf49aa8365feeb945f9eb8fd6dbb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
FormatMessageA
GetLastError
LeaveCriticalSection
CloseHandle
CreateMutexA
LoadLibraryExA
CreateDirectoryA
InterlockedCompareExchange
OpenMutexA
DeleteCriticalSection
EnterCriticalSection
LoadLibraryA
FreeLibrary
IsDebuggerPresent
ReleaseMutex
InitializeCriticalSection
GetSystemDirectoryA
CreateProcessA
ExitProcess
LocalFree
ReadFile
CreateFileA
VirtualAlloc
GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
user32
SetTimer
wsprintfA
MessageBoxA
KillTimer
SetWindowPos
CreateWindowExA
ole32
CLSIDFromString
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoInitialize
CoUninitialize
oleaut32
LoadRegTypeLi
LoadTypeLi
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ