Static task
static1
Behavioral task
behavioral1
Sample
MCL.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
MCL.exe
Resource
win10v2004-20230220-en
General
-
Target
MCL.exe
-
Size
79KB
-
MD5
32ad5920d548a4aa9538690fa04d91ab
-
SHA1
9f07e988a4d6ea185f8ee4f9c39b94855b6591fc
-
SHA256
0559f97fcc513da8307494af423c41107c8be18d83d125165c87ca2804f21b5f
-
SHA512
6c7205f23534010dcee66ec342bc3f739601d3b20b5018c61655bcedbd8776550a1155dcb8e2f49d2933c9da8536201b0254100202ed449d9c7ab22a228fd038
-
SSDEEP
1536:kz6lhi47jsQ2bWS9bLKmJ2yNmXkM1LDoJ+FIRk0bLWKFkMk4GcYKF5ua1:W6lhi47wQ2bVFJ1NmXkeLDoyLGLDPIcF
Malware Config
Signatures
Files
-
MCL.exe.exe windows x86
ad65b7e46bf958e233986ccb49175312
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsRelativeW
PathAppendW
kernel32
FreeLibrary
GetThreadContext
GetModuleHandleA
LoadLibraryW
ContinueDebugEvent
WaitForDebugEvent
CreateProcessW
GetCurrentDirectoryW
GetCommandLineW
GetProcAddress
ReadProcessMemory
WriteProcessMemory
SetThreadContext
GetModuleFileNameA
GetLastError
GetModuleHandleW
GetTimeZoneInformation
GetSystemTimeAsFileTime
FileTimeToSystemTime
FindResourceW
LoadResource
LockResource
GetModuleFileNameW
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
CreateFileW
CloseHandle
HeapFree
HeapAlloc
GetStartupInfoW
HeapReAlloc
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
Sleep
ExitProcess
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
HeapSize
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
LoadLibraryA
SetFilePointer
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
WriteFile
user32
MessageBoxW
advapi32
RegOpenKeyExW
RegCloseKey
RegEnumKeyW
RegQueryValueExW
shell32
SHGetFolderPathW
Sections
.text Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ