Static task
static1
Behavioral task
behavioral1
Sample
c393070471e04b3ff1310bede9ee2485fdb5632a7869c9b9c81e7ebd4a385c22.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c393070471e04b3ff1310bede9ee2485fdb5632a7869c9b9c81e7ebd4a385c22.exe
Resource
win10v2004-20220812-en
General
-
Target
c393070471e04b3ff1310bede9ee2485fdb5632a7869c9b9c81e7ebd4a385c22
-
Size
634KB
-
MD5
1e7664eb87c88537b386a6d2295d4735
-
SHA1
ca500ce97bc26fd9ea6f3073ec10d89359d4ce5f
-
SHA256
c393070471e04b3ff1310bede9ee2485fdb5632a7869c9b9c81e7ebd4a385c22
-
SHA512
7efd697028bccbbbdf7f5aa889b914a734e636ee0cd8ab9f74bf34401cfb44b9aec62ea62728c7953f406c7e04e9d7a87081927134562252a64623a263c8b859
-
SSDEEP
12288:k++TaRfLAWa+cO3aR+/hGIA7g3SL5Yy2Ll+uTzTIWL145z:kV9Wa+1aR+/h6cSL5YyBozTez
Malware Config
Signatures
Files
-
c393070471e04b3ff1310bede9ee2485fdb5632a7869c9b9c81e7ebd4a385c22.exe windows x86
93831d449e073e19b269820543dc17c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DispatchMessageW
SendMessageW
GetDC
SetWindowTextW
MapWindowPoints
InvalidateRect
GetAsyncKeyState
GetWindowPlacement
kernel32
GetCurrentProcessId
SleepEx
ExitProcess
GetCommandLineA
HeapDestroy
HeapCreate
GetStartupInfoA
VirtualProtect
QueryPerformanceCounter
EnterCriticalSection
TlsSetValue
GetLocalTime
InterlockedDecrement
Sleep
msvcrt
wcsncmp
gdi32
DeleteObject
RectVisible
ole32
CLSIDFromString
Sections
.text Size: 617KB - Virtual size: 617KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ