Static task
static1
Behavioral task
behavioral1
Sample
c71dedd94db309ac99a98f4ce6a54785a370bd5fc6b7116d0e36934c1cdffcfb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c71dedd94db309ac99a98f4ce6a54785a370bd5fc6b7116d0e36934c1cdffcfb.exe
Resource
win10v2004-20221111-en
General
-
Target
c71dedd94db309ac99a98f4ce6a54785a370bd5fc6b7116d0e36934c1cdffcfb
-
Size
454KB
-
MD5
3be45a2d1cd20a7e5c620e98bbaf3981
-
SHA1
9609a30c9155e39d8c9f513d92023d1544eb1595
-
SHA256
c71dedd94db309ac99a98f4ce6a54785a370bd5fc6b7116d0e36934c1cdffcfb
-
SHA512
6d24e6a2be330d23b7623f06efae4d1047968f2c057a957d0a756da81062c266552bf4248c4fd1a36c5c8b65f922a5b9a3f2599619668d1c1d91ba3afe0f9eeb
-
SSDEEP
6144:UOKvG1fwjByXTPD3AK86za329/k16D4xhQaby4iKlvQZB+y+BwFDYDV1g:UFEf+MXv3ALaaIc13xuwXlj/pDV1
Malware Config
Signatures
Files
-
c71dedd94db309ac99a98f4ce6a54785a370bd5fc6b7116d0e36934c1cdffcfb.exe windows x86
6b665b7262a4e3f0c0222cb3d7cafb7e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
FileTimeToLocalFileTime
lstrlenW
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
HeapCreate
LCMapStringW
GetLastError
LeaveCriticalSection
ExitProcess
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
GetProcAddress
DuplicateHandle
FindFirstFileW
CreateFileMappingA
CompareStringA
LoadLibraryW
FindNextFileW
CompareStringW
GetProcessHeap
GetSystemInfo
WaitForMultipleObjects
DeleteFileW
SetEvent
GetWindowsDirectoryA
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
FreeLibrary
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
lstrcpynA
WriteConsoleW
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
GetConsoleMode
VirtualQuery
GetVersion
WriteConsoleA
TerminateProcess
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
SetFileAttributesA
CreateThread
GetModuleHandleA
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
OutputDebugStringA
FormatMessageA
InterlockedDecrement
FindClose
GlobalLock
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
GetOEMCP
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetCommandLineA
GetSystemTimeAsFileTime
GetTimeZoneInformation
WriteFile
GetStringTypeA
GetCPInfo
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
SetErrorMode
ExpandEnvironmentStringsA
lstrcatA
LocalAlloc
GetLocaleInfoA
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindNextFileA
WaitForSingleObject
GetFileAttributesA
GetConsoleOutputCP
GetStdHandle
GetACP
GetModuleHandleW
InterlockedExchange
FindResourceA
SizeofResource
CreateProcessA
TlsGetValue
IsValidCodePage
UnmapViewOfFile
VirtualFree
Sleep
VirtualAlloc
CloseHandle
ResetEvent
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
user32
UpdateWindow
GetParent
GetMessageA
DestroyWindow
SendMessageA
GetCursorPos
ShowWindow
DispatchMessageA
IsWindow
SetWindowPos
PostQuitMessage
RegisterClassA
EnableWindow
TranslateMessage
IsWindowEnabled
GetWindow
LoadStringA
GetDC
IsIconic
LoadIconA
TrackPopupMenu
GetDesktopWindow
EndDialog
GetFocus
GetSysColor
SystemParametersInfoA
InvalidateRect
GetClientRect
SetCursor
GetSubMenu
CreateWindowExA
FillRect
EndPaint
PeekMessageA
BeginPaint
DefWindowProcA
GetSystemMetrics
GetWindowRect
PostMessageA
SetWindowLongA
SetWindowTextA
CheckMenuItem
SetTimer
GetDlgItem
ScreenToClient
SetForegroundWindow
LoadCursorA
oleaut32
VariantInit
SysFreeString
SysAllocStringLen
SysStringLen
VariantClear
SysAllocString
gdi32
CreateFontIndirectA
DeleteDC
BitBlt
GetStockObject
SetTextColor
SetBkColor
DeleteObject
SelectObject
CreateCompatibleDC
msvcrt
_strcmpi
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
free
Sections
.text Size: 319KB - Virtual size: 318KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ