Static task
static1
Behavioral task
behavioral1
Sample
c2b59d2d1508ecbee8b49c8e14c30605f52424512b42b3324667f2ae3c47b5ec.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c2b59d2d1508ecbee8b49c8e14c30605f52424512b42b3324667f2ae3c47b5ec.exe
Resource
win10v2004-20220901-en
General
-
Target
c2b59d2d1508ecbee8b49c8e14c30605f52424512b42b3324667f2ae3c47b5ec
-
Size
312KB
-
MD5
0ed6cc9068ec1b254b0c49763cdb436a
-
SHA1
c02fdaa2e25516565ca43dbe3acb20702d4c4358
-
SHA256
c2b59d2d1508ecbee8b49c8e14c30605f52424512b42b3324667f2ae3c47b5ec
-
SHA512
31169c25a659b332bdf79a9405e326fd2157d89a3b148bde3f650611a44d82e2fba112e57ca85135af4dcfb4f0164cf3810e60be4548a141eccf867973607730
-
SSDEEP
6144:QQh2uUkawE+iz9bbJ9/irl2ztosmRTlU20:RhjFaL+GbJ96rutosm9lU2
Malware Config
Signatures
Files
-
c2b59d2d1508ecbee8b49c8e14c30605f52424512b42b3324667f2ae3c47b5ec.exe windows x86
548bb3aed9f39e94ca3adcadb5ddb774
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
EnumWindowStationsW
DefWindowProcA
GetKeyState
SetFocus
ReleaseCapture
RegisterClassA
GetClassLongW
SetCapture
avifil32
AVIFileInit
AVIFileRelease
AVIFileCreateStreamA
AVIFileGetStream
AVIStreamSetFormat
AVIStreamGetFrameOpen
AVIFileOpenA
AVIStreamInfoA
AVIStreamRelease
AVIStreamGetFrameClose
AVIMakeCompressedStream
AVIStreamGetFrame
AVISaveOptions
AVIStreamWrite
gdi32
SelectObject
GetObjectA
CreateRectRgn
FillRgn
CreateDIBSection
StretchBlt
CombineRgn
SetDIBitsToDevice
DeleteObject
GetCurrentObject
DeleteDC
kernel32
Sleep
GetNumberOfConsoleInputEvents
CreateFileMappingA
GetFileType
ReadFile
GetFileSize
ExitProcess
CloseHandle
MapViewOfFile
GlobalSize
CreateFileA
WriteFile
UnmapViewOfFile
lstrlenA
Sections
.text Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 5KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ