Static task
static1
Behavioral task
behavioral1
Sample
5f4a80de36d800134eda973ab3df48899469d2f1eba2f650e7150f20150eecf2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f4a80de36d800134eda973ab3df48899469d2f1eba2f650e7150f20150eecf2.exe
Resource
win10v2004-20220812-en
General
-
Target
5f4a80de36d800134eda973ab3df48899469d2f1eba2f650e7150f20150eecf2
-
Size
631KB
-
MD5
838833808a81b50c3dddb06581a47bc2
-
SHA1
af0dd692db99ee46511e28df09fe97cc9579649d
-
SHA256
5f4a80de36d800134eda973ab3df48899469d2f1eba2f650e7150f20150eecf2
-
SHA512
301b5ef85af66beaa10d4f557f266dade0be28319529e7e719fc4c3414217d28f4954399b12ec8ad741734a11a75285854cea9972e09f1d4addbf669caff79dd
-
SSDEEP
12288:I+PYWKU+jWhtlGTO724AGdzOlmZy/t7IOj9daUG1Mxk9PmVUBo6LwwJ:I0YWcSht8672T4wIc9daUG119PCiJJ
Malware Config
Signatures
Files
-
5f4a80de36d800134eda973ab3df48899469d2f1eba2f650e7150f20150eecf2.exe windows x86
92e7c999f2ebc114ea672f7832779164
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
SetBkColor
SelectObject
oleaut32
SysAllocStringLen
SysStringLen
VariantClear
kernel32
GetStdHandle
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
GetCurrentProcessId
GetModuleHandleA
GetVersion
GetCommandLineA
GetCurrentThreadId
GetLastError
ExitProcess
VirtualAlloc
Sleep
VirtualFree
HeapCreate
ReadFile
SetFilePointer
TlsFree
RaiseException
HeapSize
GetCurrentDirectoryA
GetCommandLineW
LockResource
SizeofResource
lstrlenW
GetEnvironmentStringsW
GetThreadLocale
lstrlenA
GetSystemInfo
LCMapStringW
LeaveCriticalSection
TlsSetValue
GetFileType
CompareStringA
GetCPInfo
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
FreeLibrary
SetHandleCount
EnterCriticalSection
HeapFree
TerminateProcess
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
HeapAlloc
IsDebuggerPresent
InterlockedDecrement
SetLastError
FormatMessageA
TlsGetValue
LocalFree
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
SetStdHandle
SetErrorMode
GetLocaleInfoA
user32
SendMessageA
InvalidateRect
IsWindowVisible
SystemParametersInfoA
GetSysColor
SetForegroundWindow
LoadIconA
LoadCursorA
CheckMenuItem
SetWindowTextA
SetWindowLongA
PostMessageA
GetSystemMetrics
SetTimer
TranslateMessage
PeekMessageA
EnableWindow
ShowWindow
GetParent
DestroyWindow
GetDC
DispatchMessageA
IsWindow
SetWindowPos
Sections
.text Size: 600KB - Virtual size: 926KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ