Static task
static1
Behavioral task
behavioral1
Sample
5dfa515315f72a107d3541ea8fa804fd364daf867578fc70e131ec52613b58c3.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
5dfa515315f72a107d3541ea8fa804fd364daf867578fc70e131ec52613b58c3.exe
Resource
win10v2004-20220721-en
General
-
Target
5dfa515315f72a107d3541ea8fa804fd364daf867578fc70e131ec52613b58c3
-
Size
312KB
-
MD5
239efbf95c2860f12e662a99b3565f48
-
SHA1
05c15510420333d3d737d7fe97e21d0c05ca081e
-
SHA256
5dfa515315f72a107d3541ea8fa804fd364daf867578fc70e131ec52613b58c3
-
SHA512
4b256ab638ab603aeffdcb952b08e593e05d09a2d0cf6f220afd8ab9750491ec8e8ae1371515a69fd6ad2e2633dce29848e9e00040e9e64e1300c62bc335aee3
-
SSDEEP
3072:sfJhSO7rraJHB7ZhMHEFRvqH96pXMqdv/U+XBNyBNJSaXhP2cZH7oczKvQ+OqBwi:NOOhZhMkFRCd6n6YUfD7oc1U8cI9Y
Malware Config
Signatures
Files
-
5dfa515315f72a107d3541ea8fa804fd364daf867578fc70e131ec52613b58c3.exe windows x86
de6076ef45f1673e8f1c5421ac6f285b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetHandleInformation
GetCommState
lstrlenW
GetModuleHandleW
GetFileAttributesExA
TryEnterCriticalSection
PeekConsoleInputW
CreateFileW
GetStringTypeW
OutputDebugStringW
FlushFileBuffers
DebugActiveProcess
GetLastError
GetProcessPriorityBoost
GetBinaryTypeW
LocalAlloc
GlobalMemoryStatus
WTSGetActiveConsoleSessionId
GetProcAddress
WriteConsoleW
SetStdHandle
SetFilePointerEx
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
IsProcessorFeaturePresent
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetConsoleCP
GetConsoleMode
SetLastError
GetCurrentThread
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateEventW
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
CreateSemaphoreW
SetConsoleCtrlHandler
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FatalAppExitA
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
CloseHandle
user32
CreateCaret
GetMonitorInfoA
MsgWaitForMultipleObjects
advapi32
RegDeleteKeyA
RegCreateKeyExW
RegConnectRegistryW
AreAnyAccessesGranted
AreAllAccessesGranted
SetThreadToken
QueryServiceLockStatusW
winhttp
WinHttpCloseHandle
WinHttpOpenRequest
Sections
.text Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 78.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ