Static task
static1
Behavioral task
behavioral1
Sample
c0e20d50befca7304cd5e38d5dab399ef23ad7322bb813c22aea0769cb6e403e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c0e20d50befca7304cd5e38d5dab399ef23ad7322bb813c22aea0769cb6e403e.exe
Resource
win10v2004-20220901-en
General
-
Target
c0e20d50befca7304cd5e38d5dab399ef23ad7322bb813c22aea0769cb6e403e
-
Size
305KB
-
MD5
e9655f57ca51770a564046e2c04fa50a
-
SHA1
d80bc61a28ba91dc0ae7c7beb07d7701cc9ce907
-
SHA256
c0e20d50befca7304cd5e38d5dab399ef23ad7322bb813c22aea0769cb6e403e
-
SHA512
ebbca0a3e0c80d9e83ea722234f0af410cf277fefdba73aceea13fdc5bc3fc9666e99d40204776f3a4189b8cb761c08e43b1a5b4fd81ea662c253b08c44d959e
-
SSDEEP
6144:c5ZXLDPnPsHhCLEUmnwpddCwzGtblo2Wbebn0jsIn7vul9y:SZ3PnPWMt2Wibn0jsI7ml9y
Malware Config
Signatures
Files
-
c0e20d50befca7304cd5e38d5dab399ef23ad7322bb813c22aea0769cb6e403e.exe windows x86
dfa205e77365164a5055daf5be015794
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
lstrcatA
GetStartupInfoW
IsBadWritePtr
LoadLibraryA
InterlockedExchange
GetFileSize
lstrcpyA
HeapCreate
GetStringTypeA
SetFileTime
SetFileTime
LeaveCriticalSection
SetFileTime
HeapSize
GetLastError
ReadFile
CreateEventA
GetModuleHandleA
GetExitCodeProcess
SetConsoleTitleA
mstscax
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllUnregisterServer
shell32
ShellAboutA
ExtractIconA
StrChrA
DragQueryFileA
DuplicateIcon
SHGetDiskFreeSpaceA
DragFinish
DragAcceptFiles
SHGetSettings
SHFree
SHGetMalloc
DllUnregisterServer
ShellMessageBoxW
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 112B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ