Static task
static1
Behavioral task
behavioral1
Sample
c487ad92b2becc7e44380fa773f969e933a319863d54b978079674b41cd7e9c0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c487ad92b2becc7e44380fa773f969e933a319863d54b978079674b41cd7e9c0.exe
Resource
win10v2004-20220812-en
General
-
Target
c487ad92b2becc7e44380fa773f969e933a319863d54b978079674b41cd7e9c0
-
Size
807KB
-
MD5
06da88a2151d121aba362914ba384662
-
SHA1
aa6a58c05c7a139d1f6cc75e4b3fe91fb910ba23
-
SHA256
c487ad92b2becc7e44380fa773f969e933a319863d54b978079674b41cd7e9c0
-
SHA512
9243a8651e1b9b6a8ed5c49b70138ae165743fae5b6d012a83bdc77d83e890b7786f2aed7ee451a94c647d4e7bd36a9f8d71f7b03165f2185babb2a05d724bb3
-
SSDEEP
12288:PiHdPswONF9DFezfh7LIjHlyS6A+nxWd0KExiusKgxm:KmwDzfhXILlybnoeKYsKZ
Malware Config
Signatures
Files
-
c487ad92b2becc7e44380fa773f969e933a319863d54b978079674b41cd7e9c0.exe windows x86
1a37b7a0c2237a8e6b94a4e926e140dc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetModuleFileNameA
LeaveCriticalSection
LocalAlloc
GetProcessHeap
ReadFile
CreateThread
InterlockedIncrement
GetSystemTimeAsFileTime
LoadLibraryW
lstrcmpiW
LoadLibraryW
MultiByteToWideChar
CreateEventW
LocalFree
QueryPerformanceCounter
GetCurrentThreadId
CreateFileW
CloseHandle
lstrcmpiW
EnterCriticalSection
GetModuleFileNameA
GetCurrentProcessId
HeapDestroy
GetModuleFileNameW
CloseHandle
UnhandledExceptionFilter
HeapDestroy
CreateEventW
InterlockedExchange
VirtualProtect
EnterCriticalSection
GetModuleHandleW
GetCurrentProcessId
GetLastError
InitializeCriticalSection
lstrlenA
GetModuleHandleW
LeaveCriticalSection
GetModuleHandleA
GetModuleFileNameA
DeleteCriticalSection
GetModuleFileNameW
LocalAlloc
VirtualProtect
GetModuleFileNameA
lstrlenA
LoadLibraryA
VirtualProtect
MultiByteToWideChar
GetModuleHandleW
InterlockedExchange
CreateThread
GetProcessHeap
GetModuleHandleW
SetLastError
LoadLibraryW
GetProcessHeap
LeaveCriticalSection
HeapDestroy
GetModuleHandleW
VirtualProtect
ReadFile
GetProcAddress
ReadFile
SetLastError
GetProcAddress
HeapDestroy
LocalAlloc
GetCurrentThreadId
DeleteCriticalSection
LoadLibraryW
CloseHandle
InterlockedDecrement
LoadLibraryA
SetLastError
CloseHandle
VirtualProtect
LoadLibraryW
DisableThreadLibraryCalls
GetModuleFileNameW
GetProcAddress
SetLastError
GetCurrentProcess
GetCurrentProcess
ReadFile
LocalAlloc
DeleteCriticalSection
GetLastError
InterlockedIncrement
CreateFileW
GetProcessHeap
DeleteCriticalSection
VirtualProtect
GetCurrentProcessId
InterlockedCompareExchange
CloseHandle
DeleteCriticalSection
CloseHandle
GetSystemTimeAsFileTime
CreateThread
LoadLibraryA
GetCurrentThreadId
user32
GetClientRect
CreateWindowExW
GetDC
ShowWindow
GetSysColor
CreateWindowExW
GetDesktopWindow
GetDesktopWindow
CharNextW
wsprintfA
DestroyWindow
GetFocus
BeginPaint
GetDlgItem
EndDialog
SendDlgItemMessageW
GetWindowRect
SetForegroundWindow
IsWindow
ShowWindow
SendDlgItemMessageW
SendMessageW
SetCursor
PeekMessageW
GetWindowLongW
GetDlgItem
GetSystemMetrics
DestroyWindow
LoadCursorW
ShowWindow
GetWindowRect
IsWindow
IsWindow
SetCursor
IsWindow
BeginPaint
ReleaseDC
wsprintfA
SendMessageW
CreateWindowExW
GetSysColor
GetDC
TranslateMessage
GetDlgItem
DispatchMessageW
SetWindowPos
GetDC
GetParent
GetParent
GetSysColor
GetDesktopWindow
EnableWindow
SetWindowPos
EnableWindow
GetFocus
SendMessageW
DispatchMessageW
GetClientRect
IsDlgButtonChecked
LoadCursorW
CharNextW
GetClientRect
EndDialog
GetDlgItem
DispatchMessageW
SetTimer
SetTimer
EndPaint
IsDlgButtonChecked
PostQuitMessage
DispatchMessageW
ReleaseDC
DialogBoxParamW
GetParent
SetDlgItemTextW
SetWindowPos
GetDesktopWindow
LoadCursorW
SetDlgItemTextW
ReleaseDC
CreateWindowExW
SendDlgItemMessageW
LoadCursorW
MessageBoxW
BeginPaint
SetCursor
DispatchMessageW
GetSystemMetrics
DestroyWindow
GetParent
SendDlgItemMessageW
IsWindow
PostQuitMessage
SetWindowLongW
LoadStringW
IsWindow
SetDlgItemTextW
GetWindowRect
SetWindowTextW
EndPaint
ReleaseDC
Sections
.text Size: 718KB - Virtual size: 968KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ