Static task
static1
Behavioral task
behavioral1
Sample
59a5e58b7ac31ade1333a29c66ce85cf4fd846c80988c353d3276c08cc2ddee2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
59a5e58b7ac31ade1333a29c66ce85cf4fd846c80988c353d3276c08cc2ddee2.exe
Resource
win10v2004-20220812-en
General
-
Target
59a5e58b7ac31ade1333a29c66ce85cf4fd846c80988c353d3276c08cc2ddee2
-
Size
1.1MB
-
MD5
80ec4aa544d17256425c3259464206c0
-
SHA1
bb49d48ce1a638c2ce2a4c366962996f32fe2729
-
SHA256
59a5e58b7ac31ade1333a29c66ce85cf4fd846c80988c353d3276c08cc2ddee2
-
SHA512
e6749837aaa737cdc56fff434d2718a68c19a342c857231c553661ea8ffcc954f538390962410241f5ee1bad05ecbdc3ede6d6fa7a65ff64b7f3f938fa7b4486
-
SSDEEP
24576:q+9tWbM4LoSEzCgjV1HPbNCBtegaFGFYFyCJJa47:qlbM2ZmVZPbILUYFYFyCJJz7
Malware Config
Signatures
Files
-
59a5e58b7ac31ade1333a29c66ce85cf4fd846c80988c353d3276c08cc2ddee2.exe windows x86
998383a0d3eee350ddb8b84d1cee40d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLangID
GetUserDefaultLCID
GetModuleHandleA
GetCommandLineW
GetCurrentProcess
GetTickCount
GetCurrentProcessId
GetSystemDefaultLCID
GetSystemDefaultLangID
GetCurrentThread
GetCurrentThreadId
GetCommandLineA
HeapAlloc
GetProcessHeap
SetLastError
GetStringTypeW
Sleep
IsDebuggerPresent
WriteFile
SetUnhandledExceptionFilter
GetOEMCP
GetFileAttributesA
FindClose
GetModuleFileNameW
UnmapViewOfFile
GetCPInfo
EnterCriticalSection
CreateProcessA
InterlockedDecrement
FreeLibrary
WideCharToMultiByte
Sections
.text Size: 328KB - Virtual size: 327KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 814KB - Virtual size: 813KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ