Static task
static1
Behavioral task
behavioral1
Sample
c2dc06cfd811e1c3a4ebecbfd6e2b70c9aa57bc2de0e032e3973711fe54e5a22.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c2dc06cfd811e1c3a4ebecbfd6e2b70c9aa57bc2de0e032e3973711fe54e5a22.exe
Resource
win10v2004-20230220-en
General
-
Target
c2dc06cfd811e1c3a4ebecbfd6e2b70c9aa57bc2de0e032e3973711fe54e5a22
-
Size
56KB
-
MD5
2e493e839e8c31a42f4e2dc3533160b4
-
SHA1
1830956bdaa3b0d1a2172b24d8e619f35c37cdbb
-
SHA256
c2dc06cfd811e1c3a4ebecbfd6e2b70c9aa57bc2de0e032e3973711fe54e5a22
-
SHA512
08c77616cba14ea13b6e9047504769595fab94a5b4414f5d9a4a3d0820529735daad9e8e3c25f6fec3ba07a71feeb95adde16cd9edbb7d2423dc03b51a2dc86a
-
SSDEEP
192:iml8Cz8cBZZ7l+0xAVXF6FJJROq2sKRdZMFu2tx+8dE3UzSYUrGuunKRdZMFu2tQ:baE8uU0+VEFVZ1xq3UZU9w1xq3UZU9B
Malware Config
Signatures
Files
-
c2dc06cfd811e1c3a4ebecbfd6e2b70c9aa57bc2de0e032e3973711fe54e5a22.exe windows x86
0b9e34a875586c838e2f571af0c3353a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcW
DestroyWindow
DialogBoxParamW
UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadStringW
msvcr90
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 620B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ