Static task
static1
Behavioral task
behavioral1
Sample
5a18e94ac581b1a9951a557e8e291c9211e0f13c8321385ca031ff3ea11e76f0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5a18e94ac581b1a9951a557e8e291c9211e0f13c8321385ca031ff3ea11e76f0.exe
Resource
win10v2004-20220901-en
General
-
Target
5a18e94ac581b1a9951a557e8e291c9211e0f13c8321385ca031ff3ea11e76f0
-
Size
813KB
-
MD5
6c2c7277456863548a837096a7ec2a2c
-
SHA1
bbb1f077d22ebf0d26b2442592e43ca7c3629ee8
-
SHA256
5a18e94ac581b1a9951a557e8e291c9211e0f13c8321385ca031ff3ea11e76f0
-
SHA512
ce019151b9cb3e88dea0372e2bd79ee94f565ad19d903d40e7123797fe8521b31a7ff97e7ce50fc37fedc1cb66b45320b355b166a851a302a2348ba49dac6f7d
-
SSDEEP
24576:bMvRM/tD6aNMYip06UmpW7cVW5rui6NOz/lWlwk6lX:i2/MYM06LDc9W2N
Malware Config
Signatures
Files
-
5a18e94ac581b1a9951a557e8e291c9211e0f13c8321385ca031ff3ea11e76f0.exe windows x86
ade7b67b0a8a0a051be7267b10868645
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysAllocString
VariantInit
VariantClear
kernel32
InterlockedExchange
EnterCriticalSection
GetConsoleOutputCP
ReadFile
GetModuleHandleA
GetCurrentThread
GetTickCount
GetCurrentThreadId
GetCommandLineA
GetCurrentProcessId
GetLastError
GetVersion
ExitProcess
HeapAlloc
GetProcessHeap
InterlockedIncrement
VirtualAlloc
CreateFileA
HeapDestroy
SetEndOfFile
Sleep
InterlockedDecrement
FindClose
CreateEventA
VirtualFree
LoadResource
InitializeCriticalSection
SizeofResource
TerminateProcess
GetOEMCP
GetStringTypeW
HeapReAlloc
GetACP
GetSystemTimeAsFileTime
ResetEvent
SetUnhandledExceptionFilter
FindFirstFileA
FlushFileBuffers
TlsFree
GetModuleFileNameW
WideCharToMultiByte
CloseHandle
CompareStringA
SetFilePointer
HeapCreate
InterlockedCompareExchange
GetProcAddress
FreeEnvironmentStringsW
HeapSize
MultiByteToWideChar
UnhandledExceptionFilter
LockResource
GetEnvironmentStrings
LoadLibraryExA
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
LoadLibraryA
GetVersionExA
VirtualProtect
GlobalUnlock
TlsAlloc
GetThreadLocale
IsDebuggerPresent
QueryPerformanceCounter
FreeLibrary
SetEvent
GlobalFree
GetFileAttributesA
lstrlenA
user32
DestroyWindow
SetTimer
InvalidateRect
SendMessageA
GetSystemMetrics
DrawTextA
PeekMessageA
TranslateMessage
EnableWindow
GetWindowRect
LoadBitmapA
SetForegroundWindow
Sections
.text Size: 773KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ