Static task
static1
Behavioral task
behavioral1
Sample
c14cffca93d3a91572b79300002cc5838c04d78ac863e9ec4b4694ecdd275318.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c14cffca93d3a91572b79300002cc5838c04d78ac863e9ec4b4694ecdd275318.exe
Resource
win10v2004-20221111-en
General
-
Target
c14cffca93d3a91572b79300002cc5838c04d78ac863e9ec4b4694ecdd275318
-
Size
312KB
-
MD5
b4102b7f88fd5363a2adae5a47f8c8d4
-
SHA1
d5ac5eadbeeea1d55cbd45b42307494b5e51f6c5
-
SHA256
c14cffca93d3a91572b79300002cc5838c04d78ac863e9ec4b4694ecdd275318
-
SHA512
2ad3a0c2717c9f5f94d763233b70f60c1809127501bfb18f00cf261244bb3adedef8f1b6c2db8da15826b4c9256d82212c2ceb0281a25d88cb6d9296a5e67faf
-
SSDEEP
6144:g2ygYuguVZbY2y/wPwDYftXa4IXV/Xfy/2pNjCRitITBHmXm:nyKyAS4IXViR4ITFP
Malware Config
Signatures
Files
-
c14cffca93d3a91572b79300002cc5838c04d78ac863e9ec4b4694ecdd275318.exe windows x86
732708acf90ad8d66d1e94464ac1a7e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHSetValueA
PathFindExtensionA
PathFindFileNameA
advapi32
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
kernel32
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetThreadLocale
CreateFileA
GlobalGetAtomNameA
lstrcmpW
GlobalFindAtomA
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
ReadFile
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
WritePrivateProfileStringA
GlobalFlags
SetErrorMode
GetCPInfo
GetOEMCP
RtlUnwind
HeapFree
HeapAlloc
UnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
HeapReAlloc
GetSystemTimeAsFileTime
GetFileType
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitProcess
HeapSize
GetConsoleCP
GetConsoleMode
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetACP
SetStdHandle
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
RaiseException
LocalAlloc
GetCurrentProcess
GetModuleFileNameA
SetLastError
GetVersionExA
TerminateProcess
CloseHandle
FormatMessageA
LocalFree
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
GetCurrentProcessId
WriteFile
SetUnhandledExceptionFilter
GetSystemTime
GetTimeZoneInformation
GetLastError
lstrlenA
InterlockedExchange
GetVersion
MultiByteToWideChar
lstrcmpA
CompareStringA
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
TlsAlloc
user32
ClientToScreen
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
UnregisterClassA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
LoadCursorA
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
DestroyWindow
IsWindow
GetDlgItem
GetSystemMetrics
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
PeekMessageA
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
SendMessageA
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMenuState
GetMenuItemID
GetDC
ReleaseDC
GetMenuItemCount
GetSubMenu
GetSysColorBrush
DestroyMenu
ShowWindow
SetForegroundWindow
GetMenu
GetForegroundWindow
GetWindow
IsWindowVisible
GetParent
GetClassNameA
GetWindowThreadProcessId
PostMessageA
RegisterWindowMessageA
EnableWindow
GetWindowTextA
GetCursorPos
SetWindowTextA
LoadIconA
GetMessageA
gdi32
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
ExtTextOutA
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
GetDeviceCaps
SetMapMode
RestoreDC
SaveDC
DeleteObject
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
oleaut32
VariantInit
VariantClear
VariantChangeType
Sections
.text Size: 168KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ