Static task
static1
Behavioral task
behavioral1
Sample
5c9432e3f389b63a63d2aa8eed0e91350b86370539542f5a9f572395eabef946.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
5c9432e3f389b63a63d2aa8eed0e91350b86370539542f5a9f572395eabef946.exe
Resource
win10v2004-20220414-en
General
-
Target
5c9432e3f389b63a63d2aa8eed0e91350b86370539542f5a9f572395eabef946
-
Size
10.5MB
-
MD5
222c77202aaadbae9167f125d5235c93
-
SHA1
bdaa4533ebd52e7c4936cc2612ae9cc850ccdd6c
-
SHA256
5c9432e3f389b63a63d2aa8eed0e91350b86370539542f5a9f572395eabef946
-
SHA512
834691c22d611de565c4b147728f74d7cc24b623c5bdda53f43e6fc129cce765a43cfb31982618e5fb341e676adf2eb816192b1fcb26a1cd00399429db46bbbe
-
SSDEEP
196608:4iiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiin:4iiiiiiiiiiiiiiiiiiiiiiiiiiiiiin
Malware Config
Signatures
Files
-
5c9432e3f389b63a63d2aa8eed0e91350b86370539542f5a9f572395eabef946.exe windows x86
3ffd29460cabc8cecae908b1b0512f10
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GetModuleHandleA
InterlockedExchangeAdd
CreateActCtxA
DeactivateActCtx
AddRefActCtx
ReleaseActCtx
GetTapeStatus
WriteTapemark
GetConsoleDisplayMode
VerifyVersionInfoA
GetLastError
WritePrivateProfileSectionA
ResetEvent
CreateMutexA
LocalSize
ReadFileEx
SetEndOfFile
WriteProcessMemory
PulseEvent
FindResourceExA
GetConsoleTitleW
FreeConsole
AllocConsole
LoadLibraryA
VirtualProtect
GetFileAttributesW
HeapAlloc
HeapLock
GetSystemDefaultUILanguage
GetConsoleAliasW
lstrlenA
lstrlenW
CreateFileA
CloseHandle
RaiseException
RtlUnwind
GetCommandLineA
GetStartupInfoA
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
user32
GetCaretPos
ole32
CoBuildVersion
winhttp
WinHttpCloseHandle
Sections
.text Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 166KB - Virtual size: 30.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10.2MB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ