Static task
static1
Behavioral task
behavioral1
Sample
c0cf648cfa8bacb42ffafa51a85a886486ee832935afc2fa5da212dfef9f5720.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c0cf648cfa8bacb42ffafa51a85a886486ee832935afc2fa5da212dfef9f5720.exe
Resource
win10v2004-20221111-en
General
-
Target
c0cf648cfa8bacb42ffafa51a85a886486ee832935afc2fa5da212dfef9f5720
-
Size
222KB
-
MD5
a79b3ef42649bc268549c74e1ac5ac86
-
SHA1
1408783e5f40db6ed6b2b753998ec649da92f5ed
-
SHA256
c0cf648cfa8bacb42ffafa51a85a886486ee832935afc2fa5da212dfef9f5720
-
SHA512
495baca397d5b2c884c3829e70b4928204cd711653701ab017e8f76bb5acd2c639716673d019d6f77c2b59708b53a8a9ef363cf15e12c7eb2b1ff6f380d6be62
-
SSDEEP
6144:AfBGxiWnoo1z+s01SbMnvPeBWOgNj/70Hr8ur2jeX:Amloo1z+s4vPsWOSEHwua6
Malware Config
Signatures
Files
-
c0cf648cfa8bacb42ffafa51a85a886486ee832935afc2fa5da212dfef9f5720.exe windows x86
96c995cdfd7bb49e723aeecefa202113
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
lstrcmpiW
GetProcAddress
LocalAlloc
LoadLibraryW
GetModuleHandleW
CreateProcessW
FreeLibrary
GetCommandLineW
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
FlushFileBuffers
WaitForSingleObject
ReleaseSemaphore
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
SetUnhandledExceptionFilter
GetProcessId
VirtualQueryEx
CreateFileW
GetCurrentProcess
InterlockedDecrement
DeleteCriticalSection
RtlCaptureContext
CreateThread
CreateSemaphoreW
InitializeCriticalSection
InterlockedIncrement
WaitNamedPipeW
GetLastError
WaitForMultipleObjects
SetEvent
ResetEvent
WriteFile
TransactNamedPipe
GetCurrentProcessId
SetNamedPipeHandleState
GetModuleFileNameW
LocalFree
GetTempPathW
RegisterWaitForSingleObject
CreateEventW
UnregisterWaitEx
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
ExitProcess
RaiseException
HeapFree
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
HeapCreate
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
HeapAlloc
Sleep
InterlockedExchange
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
RtlUnwind
HeapSize
HeapReAlloc
LoadLibraryA
advapi32
RegOpenKeyExW
GetTokenInformation
OpenProcessToken
RegQueryValueExW
RegNotifyChangeKeyValue
RegCloseKey
ConvertSidToStringSidW
user32
GetMessageW
PostQuitMessage
UnregisterClassW
PostMessageW
EnumWindows
TranslateMessage
RegisterClassExW
GetWindowTextW
CreateWindowExW
DefWindowProcW
DispatchMessageW
GetClassNameW
ole32
StringFromGUID2
Sections
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ