Static task
static1
Behavioral task
behavioral1
Sample
5c2f229427908e4811147b232fddba04fbaf99d74b80f8a8bdcc6bce177941e3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5c2f229427908e4811147b232fddba04fbaf99d74b80f8a8bdcc6bce177941e3.exe
Resource
win10v2004-20220812-en
General
-
Target
5c2f229427908e4811147b232fddba04fbaf99d74b80f8a8bdcc6bce177941e3
-
Size
240KB
-
MD5
06c055906a0937d10a66525e31d80eb8
-
SHA1
cd7d452250112449ce346dd1388da12b061b6818
-
SHA256
5c2f229427908e4811147b232fddba04fbaf99d74b80f8a8bdcc6bce177941e3
-
SHA512
19f87435205c48d35b1331846bfb8f9dc8cd74b391566ab071198e4c2466f78cf670b1964b4c1905d13188fb7d391b85ccc71ebd47ba895c3ac994208546154d
-
SSDEEP
3072:gxnvICXdW+bacCEDNyS5UzlUuKJ3s/WwQij7Xd05eCJCNHce45DwkyHkR2/GZ:Wnwed2vINySiz6uJLTCJCZqyHkR2+Z
Malware Config
Signatures
Files
-
5c2f229427908e4811147b232fddba04fbaf99d74b80f8a8bdcc6bce177941e3.exe windows x86
0c5505af21cea94691c17d394b980327
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
GetProcAddress
LoadLibraryA
RtlZeroMemory
CreateThread
lstrcpyA
WaitForSingleObject
ExitProcess
ntdll
_wcsnicmp
user32
OpenClipboard
TranslateMessage
GetMessageA
DispatchMessageW
ole32
CoInitialize
comctl32
ord17
powrprof
GetActivePwrScheme
GetPwrCapabilities
clusapi
ClusterEnum
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 227KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE