Static task
static1
Behavioral task
behavioral1
Sample
58cf1910c8a9e15012de480c3e9c1337e7987a74d667c9298ff885b36d7298ca.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
58cf1910c8a9e15012de480c3e9c1337e7987a74d667c9298ff885b36d7298ca.exe
Resource
win10v2004-20220721-en
General
-
Target
58cf1910c8a9e15012de480c3e9c1337e7987a74d667c9298ff885b36d7298ca
-
Size
654KB
-
MD5
6874035592127651153f1eabf0e7b8ba
-
SHA1
788f645770e006426b606ab9136d1f899e2f51ea
-
SHA256
58cf1910c8a9e15012de480c3e9c1337e7987a74d667c9298ff885b36d7298ca
-
SHA512
d726ca148977b63d11dbbff3340dfea47cd2e501f4374d46162d8f604d5536289341c825572613348ef7f0210fd42d814f66105d58d105d4d729ad8c058944c0
-
SSDEEP
12288:qko5Wacs7rn8rPv/eVK4y+weeV/gx9sSkq6ktW0Qm6P95:qxFR7r8FpeevFjj7vP95
Malware Config
Signatures
Files
-
58cf1910c8a9e15012de480c3e9c1337e7987a74d667c9298ff885b36d7298ca.exe windows x86
3d079d647b8c397f2f8c601f74944edb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetUpdateRect
GetWindow
GetWindowDC
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
DdeGetLastError
kernel32
GetTickCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeA
GetProcAddress
DeleteFileW
FindNextFileW
RemoveDirectoryW
lstrlenW
GetSystemTimeAsFileTime
lstrcmpW
lstrlenA
ExpandEnvironmentStringsW
CreateDirectoryW
GetLastError
GetFileAttributesW
FindFirstFileW
FindClose
CompareFileTime
WideCharToMultiByte
MultiByteToWideChar
TlsGetValue
TlsFree
TlsAlloc
SuspendThread
Sleep
SizeofResource
SetThreadPriority
SetThreadLocale
SetLastError
SetHandleCount
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
SetConsoleCtrlHandler
RtlUnwind
ResumeThread
ResetEvent
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringA
MulDiv
LockResource
LocalFree
LocalAlloc
LoadResource
LoadLibraryExA
LoadLibraryA
LeaveCriticalSection
IsValidCodePage
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalMemoryStatus
GlobalLock
GlobalHandle
GlobalFree
GlobalFindAtomA
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetWindowsDirectoryA
GetVersionExA
GetVersion
GetThreadLocale
GetTempPathA
GetTempFileNameA
GetSystemInfo
GetStringTypeW
GetStringTypeExA
GetStdHandle
GetStartupInfoA
GetProfileStringA
GetProcessHeap
GetPrivateProfileStringA
GetOEMCP
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetFullPathNameA
GetFileType
GetFileSize
GetFileAttributesA
GetExitCodeThread
GetEnvironmentStrings
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCommandLineA
GetCPInfo
GetACP
FreeResource
FreeLibrary
FormatMessageA
FindResourceA
FindNextFileA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitThread
HeapReAlloc
TlsSetValue
InterlockedIncrement
InterlockedDecrement
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetTimeZoneInformation
ExitProcess
WriteFile
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 603KB - Virtual size: 734KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ