Static task
static1
Behavioral task
behavioral1
Sample
c10b270b10ee145f5c854cf063e2e6944f229ee66c9e3d41ab62df24353c7abc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c10b270b10ee145f5c854cf063e2e6944f229ee66c9e3d41ab62df24353c7abc.exe
Resource
win10v2004-20221111-en
General
-
Target
c10b270b10ee145f5c854cf063e2e6944f229ee66c9e3d41ab62df24353c7abc
-
Size
1.2MB
-
MD5
1357e1fec2b393c0e36531e32ef11240
-
SHA1
f50b188a8c0f1eb5b80d79ef8094437ecda7711e
-
SHA256
c10b270b10ee145f5c854cf063e2e6944f229ee66c9e3d41ab62df24353c7abc
-
SHA512
4eed8f1563c466c9fc6c841e3954cb45d545df619a33b1969357b237dcf455db0a8527d1beb1b7e08396ad7da9beb3dac0b9ecbd31fe30e29d68d4556fb51c20
-
SSDEEP
24576:WIbozwS/BIz5ZoW+T/MAmvRYrhKsKtsgmzfJYYO3ftWV0HSgF0RVQN4faYg5a7:W0okW8EvTEAwAm6psMKN8g5a7
Malware Config
Signatures
Files
-
c10b270b10ee145f5c854cf063e2e6944f229ee66c9e3d41ab62df24353c7abc.exe windows x86
239d8723a97a4902826fe8bd30730137
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
WideCharToMultiByte
CreateProcessA
CreateEventA
GetCurrentProcess
InitializeCriticalSectionEx
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
RaiseException
DecodePointer
DeleteCriticalSection
ExitProcess
GetCurrentProcessId
lstrcmpiW
EnterCriticalSection
TerminateProcess
GetModuleFileNameW
CreateThread
LoadLibraryW
ResetEvent
GetProcAddress
MoveFileA
GetModuleHandleA
OpenProcess
CopyFileA
DeleteFileA
GetSystemWow64DirectoryA
GetModuleHandleW
CreateDirectoryA
GetConsoleCP
HeapSize
GetSystemDirectoryA
SetEvent
OpenMutexA
GetLastError
Sleep
MultiByteToWideChar
LocalAlloc
WaitForSingleObject
GetVolumeInformationA
CreateMutexA
OutputDebugStringA
SetLastError
OpenEventA
GetModuleFileNameA
SetFileAttributesA
LoadResource
LockResource
FindResourceA
WriteFile
SizeofResource
CloseHandle
CreateFileA
SetFilePointer
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
LeaveCriticalSection
ReadFile
GetSystemTimeAsFileTime
CreateDirectoryW
CreateFileW
DeleteFileW
GetFileAttributesW
GetFileAttributesExW
RemoveDirectoryW
MoveFileExW
GetStdHandle
GetConsoleMode
WriteConsoleW
InitializeCriticalSectionAndSpinCount
FreeLibrary
LoadLibraryExW
CreateEventW
FlushFileBuffers
GetStartupInfoW
GetCurrentThreadId
SetThreadPriority
GetExitCodeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTimeZoneInformation
SetEnvironmentVariableW
GetComputerNameW
GetCurrentDirectoryW
FindClose
FindFirstFileW
FindNextFileW
EncodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
WaitForSingleObjectEx
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
OutputDebugStringW
RtlUnwind
InterlockedPushEntrySList
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
HeapAlloc
HeapReAlloc
HeapFree
GetCommandLineA
GetCommandLineW
GetACP
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
FindFirstFileExW
IsValidCodePage
GetOEMCP
SetFilePointerEx
advapi32
RegisterEventSourceW
CreateServiceW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
DeregisterEventSource
SetServiceStatus
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
OpenServiceW
ReportEventW
SetSecurityDescriptorDacl
SetFileSecurityW
QueryServiceStatus
CloseServiceHandle
OpenSCManagerW
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
StartServiceW
InitializeSecurityDescriptor
shell32
SHGetFolderPathA
shlwapi
PathFileExistsA
Sections
.text Size: 394KB - Virtual size: 393KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.]G' Size: 677KB - Virtual size: 677KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 29.2MB - Virtual size: 29.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ