Static task
static1
Behavioral task
behavioral1
Sample
c8960e8a7ab3ebc55023aece56069e390c59512ef5c2fca8dbddcdba32f8673d.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c8960e8a7ab3ebc55023aece56069e390c59512ef5c2fca8dbddcdba32f8673d.exe
Resource
win10v2004-20230220-en
General
-
Target
c8960e8a7ab3ebc55023aece56069e390c59512ef5c2fca8dbddcdba32f8673d
-
Size
190KB
-
MD5
a5f8e07567c5579801e402d12be1ca5d
-
SHA1
390a812a3b784764c259122cdde38dbe9a6e71fc
-
SHA256
c8960e8a7ab3ebc55023aece56069e390c59512ef5c2fca8dbddcdba32f8673d
-
SHA512
cc7b4a4868498cc5c90eb37556a8f2c547690c83f8fd9bf7650a8a267a0537067629c53756c7fc3da168cbca1012ffc28dc2259a00d0f04a3097a15f71c9a9b5
-
SSDEEP
3072:tnNcQnzzoykxHXoNvnBx7O+ZI2X9pAMLXS2Tf:tf41YnbzNXXLi2T
Malware Config
Signatures
Files
-
c8960e8a7ab3ebc55023aece56069e390c59512ef5c2fca8dbddcdba32f8673d.exe windows x86
bc7b0993941f138f0c5c47b6fa6ff174
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetSystemTime
GetTickCount
GetVersionExA
OutputDebugStringA
Sleep
GetModuleFileNameA
GetDateFormatA
FileTimeToSystemTime
GetTimeFormatA
GetSystemTime
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
ReadFile
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
CreateFileA
FlushFileBuffers
DeleteFileA
GetLocalTime
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
CloseHandle
HeapFree
HeapSize
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapReAlloc
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
SystemTimeToFileTime
VirtualAlloc
MultiByteToWideChar
RtlUnwind
FreeLibrary
GetFileAttributesA
CreateMutexA
GetLastError
LoadLibraryA
GetProcAddress
SetStdHandle
user32
EndDialog
ChildWindowFromPoint
KillTimer
SetDlgItemTextA
wsprintfA
GetSystemMetrics
GetWindowRect
BeginPaint
EndPaint
GetDC
ReleaseDC
SetTimer
GetMessageA
TranslateMessage
TranslateAcceleratorA
IsDialogMessageA
DispatchMessageA
GetParent
ScreenToClient
SendMessageTimeoutA
SetWindowPos
SetForegroundWindow
GetCursorPos
DestroyIcon
IsChild
CheckDlgButton
MessageBeep
GetClientRect
SendDlgItemMessageA
CheckRadioButton
EnableWindow
GetWindowLongA
GetDlgItemInt
GetDlgItemTextA
SetWindowLongA
SetDlgItemInt
LoadStringA
AppendMenuA
GetAsyncKeyState
SystemParametersInfoA
PostQuitMessage
TrackPopupMenu
IsWindowVisible
SetWindowTextA
IsWindow
DestroyWindow
DefWindowProcA
FindWindowA
ShowWindow
MessageBoxA
LoadIconA
RegisterClassExA
LoadAcceleratorsA
PostMessageA
DestroyMenu
CreatePopupMenu
GetDlgItem
SetCursor
LoadCursorA
DestroyCursor
SetClassLongA
SendMessageA
GetWindowTextA
DrawTextA
DialogBoxParamA
CreateDialogParamA
CreateWindowExA
AdjustWindowRectEx
gdi32
SetTextColor
SelectObject
CreateFontIndirectA
GetTextExtentPoint32A
DeleteObject
SetBkMode
comdlg32
GetOpenFileNameA
advapi32
RegSetValueExA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
RegCreateKeyA
RegQueryValueExA
shell32
Shell_NotifyIconA
ShellExecuteA
ole32
CoCreateInstance
CoUninitialize
CoInitialize
wsock32
recvfrom
htonl
gethostname
bind
connect
htons
ioctlsocket
gethostbyname
sendto
ntohs
gethostbyaddr
closesocket
WSAAsyncSelect
socket
WSACleanup
WSAStartup
WSAGetLastError
ntohl
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE