Static task
static1
Behavioral task
behavioral1
Sample
5d3e7c31f786bbdc149df632253fd538fb21cfc0aa364d0f03a79671bbaec62d.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
5d3e7c31f786bbdc149df632253fd538fb21cfc0aa364d0f03a79671bbaec62d.exe
Resource
win10v2004-20220721-en
General
-
Target
5d3e7c31f786bbdc149df632253fd538fb21cfc0aa364d0f03a79671bbaec62d
-
Size
118KB
-
MD5
846171e2629b712429a903811d19c12b
-
SHA1
960ec30ad5e94a35991a30b36411a4144b97b0d3
-
SHA256
5d3e7c31f786bbdc149df632253fd538fb21cfc0aa364d0f03a79671bbaec62d
-
SHA512
e86a587b087cdc74b3404eae847ba1488bc3c297c752d79e331b996a81437867a4f84c248dc723482aa3ed33d6a06642bbd6f39515d3b0d84007d6873637782f
-
SSDEEP
3072:huq0XQRGmyst75xSq9F1+vEmi4RTOXCzO:91yst75NiHisSuO
Malware Config
Signatures
Files
-
5d3e7c31f786bbdc149df632253fd538fb21cfc0aa364d0f03a79671bbaec62d.exe windows x86
96029c62feab645b8bc3c431be0ba555
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetProcessDefaultLayout
kernel32
GetStringTypeA
GetLocaleInfoA
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
SetHandleCount
HeapSize
GetStdHandle
HeapCreate
HeapReAlloc
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetOEMCP
GetACP
GetStringTypeW
GetCPInfo
LCMapStringW
LCMapStringA
GetStartupInfoA
GetCommandLineA
GetFileType
SetStdHandle
IsDebuggerPresent
TerminateProcess
GetSystemTimeAsFileTime
GetProcessHeap
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
SetFilePointer
GetVersionExA
GetCurrentProcess
FlushFileBuffers
GetCurrentProcessId
GlobalCompact
HeapDestroy
InterlockedIncrement
InterlockedDecrement
VirtualFree
ExitProcess
GetProcessIoCounters
LocalAlloc
QueryPerformanceCounter
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
GetProcAddress
GetModuleHandleA
GetEnvironmentStrings
CloseHandle
ReadFile
WriteFile
GetModuleFileNameA
Sleep
CreateFileA
LoadLibraryA
SetLastError
HeapAlloc
HeapFree
VirtualAlloc
RtlUnwind
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ