Static task
static1
Behavioral task
behavioral1
Sample
c280d91d9f62e49226330d07ae1f25eaf5a96dbdab8f943ce61f1339e34bcfce.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c280d91d9f62e49226330d07ae1f25eaf5a96dbdab8f943ce61f1339e34bcfce.exe
Resource
win10v2004-20220812-en
General
-
Target
c280d91d9f62e49226330d07ae1f25eaf5a96dbdab8f943ce61f1339e34bcfce
-
Size
46KB
-
MD5
bc517f015598a02462ea4bcc61846a46
-
SHA1
a6f22ad4505740b56d7ad3f3503817723c11ed8b
-
SHA256
c280d91d9f62e49226330d07ae1f25eaf5a96dbdab8f943ce61f1339e34bcfce
-
SHA512
69ca174187640a75a90eb5183e2480ef23ba7a885eae0405d54e98af0c6d9ab23f407f503ea6555d767be93091df2f0b5d3917bcbaf3a908bbd97c93bac19c63
-
SSDEEP
768:nk3YC2TBUH1jcOo9GOMdPQbOe8STfkpQouDV:koXa1jcOo4//eHiQHV
Malware Config
Signatures
Files
-
c280d91d9f62e49226330d07ae1f25eaf5a96dbdab8f943ce61f1339e34bcfce.exe windows x86
06155247091b216cfc57dcc11c72f868
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetUserObjectInformationW
ReleaseDC
GetWindowLongW
DispatchMessageW
SetScrollInfo
CharUpperW
GetUserObjectInformationW
DispatchMessageW
GetWindowLongW
GetWindowDC
UnregisterClassA
UnregisterClassW
TranslateMessageEx
KillTimer
KillTimer
DispatchMessageW
PostMessageW
GetWindowThreadProcessId
PostMessageW
GetWindowThreadProcessId
ReleaseDC
SetScrollInfo
kernel32
GetSystemTime
CreateProcessW
WaitForSingleObject
LoadLibraryExW
GetStartupInfoA
LoadLibraryExW
SleepEx
Sleep
CreateProcessA
CreateFileA
SleepEx
CreateFileA
TerminateProcess
VirtualProtectEx
CreateProcessW
GetStartupInfoW
GetStartupInfoW
WriteProcessMemory
CreateProcessA
VirtualProtectEx
Sleep
CreateProcessW
WriteProcessMemory
LoadLibraryA
CreateProcessA
CreateFileA
GetStartupInfoA
VirtualProtectEx
GetStartupInfoA
CreateFileA
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntA
GetBinaryTypeW
TerminateProcess
GetSystemTimeAsFileTime
ReadFile
CreateFileA
WaitForSingleObject
VirtualProtect
GetSystemTimeAsFileTime
VirtualProtectEx
CreateProcessA
SleepEx
GetStartupInfoW
CreateProcessW
GetStartupInfoW
CreateProcessA
CreateProcessA
Sleep
ReadProcessMemory
LoadLibraryExW
GetStartupInfoA
VirtualProtectEx
CreateProcessW
GetSystemTime
SleepEx
VirtualProtect
CreateFileA
GetSystemTime
GetSystemTime
WriteProcessMemory
VirtualProtect
CreateFileA
Sections
.text Size: 12KB - Virtual size: 1024KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_MEM_READ