Static task
static1
Behavioral task
behavioral1
Sample
5cc47c35dcf35e097f10cf9d2c545736ab0a5b7a10a31cdff1d87f79b1bcf9b5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5cc47c35dcf35e097f10cf9d2c545736ab0a5b7a10a31cdff1d87f79b1bcf9b5.exe
Resource
win10v2004-20220812-en
General
-
Target
5cc47c35dcf35e097f10cf9d2c545736ab0a5b7a10a31cdff1d87f79b1bcf9b5
-
Size
340KB
-
MD5
76f9a48ef22bed3d8545dce226eea93a
-
SHA1
970a240f48110b24ec681f3bf81319d8d31ce940
-
SHA256
5cc47c35dcf35e097f10cf9d2c545736ab0a5b7a10a31cdff1d87f79b1bcf9b5
-
SHA512
4429eed230c1feeee811c52840dc4cdcca3b78a4e657dd5c76839dd3331be8e6e98ea2fb80a646020b521278fab2708a6185c73520f8a3ecb78956ede1165647
-
SSDEEP
6144:YmHGMBVrEKTYTgnLmu9Uj/dqgkhsRe+1v7DNk0AO3XsuaJZ8wX+z3p:Ym3BVrHk46gUjFqgkY1TDySMu74+z3
Malware Config
Signatures
Files
-
5cc47c35dcf35e097f10cf9d2c545736ab0a5b7a10a31cdff1d87f79b1bcf9b5.exe windows x86
579173f5c50c8e980cdac695d2edece2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
VirtualQuery
RtlUnwind
GetLastError
EnumDateFormatsExA
InitializeCriticalSection
GetSystemDefaultLangID
GetModuleFileNameW
GetPrivateProfileIntW
TerminateProcess
FileTimeToLocalFileTime
GetCurrentThread
PulseEvent
TlsSetValue
GetDateFormatA
GetTickCount
WriteProfileSectionA
HeapCreate
LocalHandle
GetSystemTimeAsFileTime
GetNumberFormatW
LCMapStringW
GetACP
SetConsoleCP
FormatMessageA
IsValidCodePage
LoadLibraryA
GetEnvironmentStrings
SetStdHandle
FlushFileBuffers
VirtualLock
GetCurrentProcessId
TlsFree
SetLocaleInfoW
OpenProcess
GetStartupInfoW
FindResourceA
GetLocalTime
HeapLock
GlobalUnlock
GetPrivateProfileStringW
LCMapStringA
EnumCalendarInfoExA
VirtualFree
DeleteCriticalSection
LoadLibraryExW
DebugBreak
HeapSize
IsBadWritePtr
ReadConsoleW
WriteConsoleOutputCharacterW
WaitForSingleObject
GetFileType
WriteFile
GetSystemInfo
RemoveDirectoryW
GetLocaleInfoW
FindResourceExA
FoldStringW
VirtualAlloc
GetDiskFreeSpaceA
WaitForMultipleObjects
QueryPerformanceCounter
GlobalGetAtomNameW
SetHandleCount
GetCommandLineW
CompareStringW
GetStringTypeA
IsValidLocale
WideCharToMultiByte
FreeEnvironmentStringsW
SetComputerNameA
SuspendThread
SetConsoleCursorPosition
GetConsoleCursorInfo
ReadFileEx
GetVersionExA
HeapAlloc
HeapFree
TlsAlloc
GetUserDefaultLCID
SetConsoleActiveScreenBuffer
ReadFile
HeapDestroy
GetEnvironmentStringsW
GetDiskFreeSpaceW
ExitProcess
SetVolumeLabelW
GetCurrentThreadId
TryEnterCriticalSection
SetConsoleCursorInfo
SetCriticalSectionSpinCount
GetProcessHeap
LockResource
GetTimeFormatA
TlsGetValue
EnumResourceLanguagesA
GetModuleFileNameA
GetLocaleInfoA
VirtualProtect
MultiByteToWideChar
OpenMutexA
SetLastError
GetStringTypeW
UnhandledExceptionFilter
InterlockedExchange
CloseHandle
GetTimeZoneInformation
SetLocaleInfoA
FillConsoleOutputAttribute
MapViewOfFile
CompareStringA
GetCommandLineA
lstrcat
GetCPInfo
GetStdHandle
SetFilePointer
HeapReAlloc
CommConfigDialogW
FormatMessageW
GetConsoleOutputCP
SetEnvironmentVariableA
GetStartupInfoA
OpenMutexW
GetCurrentProcess
FindResourceW
SetUnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
CreateNamedPipeA
CreateFileA
GetProcAddress
FlushConsoleInputBuffer
GetModuleHandleA
LockFileEx
EnumSystemLocalesA
GetOEMCP
FindAtomW
CreateThread
GetTempFileNameA
WritePrivateProfileStringA
FreeEnvironmentStringsA
comctl32
CreatePropertySheetPage
ImageList_Replace
ImageList_SetOverlayImage
InitCommonControlsEx
user32
DispatchMessageW
FindWindowA
GetInputState
GetLastActivePopup
wvsprintfA
ChangeClipboardChain
CreateWindowStationA
RegisterClassA
RegisterWindowMessageW
MessageBoxIndirectA
ExitWindowsEx
LoadMenuW
UnregisterClassW
CreateDialogIndirectParamW
EnumWindowStationsA
SendIMEMessageExA
BeginDeferWindowPos
AttachThreadInput
EnumDesktopsA
SendInput
ClipCursor
GetClassInfoExW
DestroyCaret
GetClassNameA
MessageBeep
DialogBoxIndirectParamW
SwitchToThisWindow
DlgDirListComboBoxA
DdeConnectList
SwapMouseButton
ScrollWindow
MapDialogRect
RegisterClassExA
LoadCursorW
WINNLSGetIMEHotkey
DdeQueryConvInfo
LoadBitmapW
gdi32
PolyBezierTo
GetDIBColorTable
Pie
SetBoundsRect
wininet
FtpCommandA
RetrieveUrlCacheEntryStreamW
InternetCreateUrlA
GetUrlCacheEntryInfoExA
FindNextUrlCacheContainerW
InternetSetOptionW
advapi32
RegCreateKeyExW
RegOpenKeyExA
RegEnumKeyExA
CryptEnumProviderTypesW
RegEnumKeyExW
CryptGenKey
RegConnectRegistryW
CryptVerifySignatureW
InitializeSecurityDescriptor
Sections
.text Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ