Static task
static1
Behavioral task
behavioral1
Sample
5c771162f5562b850ffde30e0e0e52a58bf8cd26c8989abf8e9cf9bbf3bcd80b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5c771162f5562b850ffde30e0e0e52a58bf8cd26c8989abf8e9cf9bbf3bcd80b.exe
Resource
win10v2004-20220812-en
General
-
Target
5c771162f5562b850ffde30e0e0e52a58bf8cd26c8989abf8e9cf9bbf3bcd80b
-
Size
92KB
-
MD5
6c7b35dc614e599f601bd82852c42ba9
-
SHA1
0c09c119884e6f806f49d7ab8472a405ebfe154b
-
SHA256
5c771162f5562b850ffde30e0e0e52a58bf8cd26c8989abf8e9cf9bbf3bcd80b
-
SHA512
20d942c77149988b9a106c42d20b54ddfd71b0dcdd447c9222de0c8a3c93e7a61383d0a1dda5159c70109cd565a0156bebbcbaa61aaac5ec0b71d85c12a907bf
-
SSDEEP
1536:VHeffCDmBcVKbz740ddNChucLXjro5JULoUTdLLimoxIvczWs:wH+UMKbH4mdSvbjr8ITNOEns
Malware Config
Signatures
Files
-
5c771162f5562b850ffde30e0e0e52a58bf8cd26c8989abf8e9cf9bbf3bcd80b.exe windows x86
dc813defe6e466460edf6ef9e081a9a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegLoadKeyW
RegQueryInfoKeyA
RegQueryValueA
RegDeleteKeyA
RegLoadKeyA
RegQueryInfoKeyW
RegDeleteValueA
RegEnumValueA
RegEnumKeyA
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyA
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExA
RegFlushKey
RegQueryValueW
RegEnumValueA
RegEnumKeyW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyW
RegCreateKeyA
RegFlushKey
RegQueryValueExA
RegOpenKeyA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueA
RegLoadKeyA
RegCreateKeyA
RegDeleteKeyW
RegOpenKeyW
RegReplaceKeyW
RegEnumKeyW
RegGetKeySecurity
RegLoadKeyW
RegQueryInfoKeyW
RegCreateKeyExW
RegQueryValueA
RegCreateKeyW
RegEnumValueW
RegQueryValueExA
RegCreateKeyExA
RegQueryValueW
RegEnumValueA
RegQueryInfoKeyA
kernel32
WriteFile
GetLocalTime
CopyFileExW
GetCommandLineA
GetFileType
ExitThread
DeleteFileW
GetPriorityClass
ExitProcess
FindAtomW
FreeResource
DeleteFileA
AddAtomW
DeleteAtom
GetPriorityClass
GetCommandLineA
DeleteAtom
GetLocalTime
AddAtomA
AddAtomW
GetCPInfo
ExitThread
FindAtomW
OpenFileMappingA
FatalExit
GetStdHandle
GetPriorityClass
GetLastError
DeleteAtom
AddAtomA
GlobalFree
FindAtomA
GetCommandLineA
GetFileTime
ExitThread
GetFileType
FlushFileBuffers
DeleteFileA
FatalExit
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 51KB - Virtual size: 350KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 659B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ