Static task
static1
Behavioral task
behavioral1
Sample
5cb182d4f77cfa507a4ca9dbd59d8310d2deb3cc6325a50ab247b8a6578d91f4.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
5cb182d4f77cfa507a4ca9dbd59d8310d2deb3cc6325a50ab247b8a6578d91f4.exe
Resource
win10v2004-20220721-en
General
-
Target
5cb182d4f77cfa507a4ca9dbd59d8310d2deb3cc6325a50ab247b8a6578d91f4
-
Size
362KB
-
MD5
cbb0ce54b5eec9de6ed74a9d5f0ac537
-
SHA1
2be319bb3d27cdee6b021f54de20eb5ea7d9009d
-
SHA256
5cb182d4f77cfa507a4ca9dbd59d8310d2deb3cc6325a50ab247b8a6578d91f4
-
SHA512
afd926f78c36f8901eca187aee43c24ab02f0e954658defe192b122422112aaa0e7b82e62509a8b54ae4dfc99a79c5b49a82286247ba30fabde69a79de7cc353
-
SSDEEP
6144:6wrmULWWZIVoKq7gUFv94tJkuQW23Cdp8PhjYfDu26vnzS4ju:6wSU96nOgqGtJkstdiPhjq5wnO8u
Malware Config
Signatures
Files
-
5cb182d4f77cfa507a4ca9dbd59d8310d2deb3cc6325a50ab247b8a6578d91f4.exe windows x86
f02dfc7c71576e6499608a70e390e871
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetThreadContext
CreateProcessW
GlobalLock
VirtualFree
GlobalAlloc
Sleep
GetModuleFileNameW
GlobalUnlock
GetTempPathW
GetProcAddress
GetModuleHandleA
ResumeThread
SetEndOfFile
WriteConsoleW
SetStdHandle
CreateFileW
LoadLibraryW
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
WideCharToMultiByte
GetLocaleInfoEx
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
RaiseException
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetCPInfo
IsProcessorFeaturePresent
IsDebuggerPresent
GetProcessHeap
GetModuleHandleExW
GetStdHandle
WriteFile
IsValidCodePage
GetACP
GetOEMCP
SetLastError
GetCurrentThreadId
HeapSize
ReadFile
GetConsoleMode
ReadConsoleW
GetConsoleCP
CloseHandle
GetFileType
InitOnceExecuteOnce
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
FlushFileBuffers
SetFilePointerEx
GetUserDefaultLocaleName
LCMapStringEx
IsValidLocaleName
EnumSystemLocalesEx
HeapReAlloc
LoadLibraryExW
OutputDebugStringW
user32
EmptyClipboard
OpenClipboard
SetClipboardData
CloseClipboard
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 235KB - Virtual size: 243KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ