Static task
static1
Behavioral task
behavioral1
Sample
5415272c79abc3d3065ed0b2b31a219d3e60f78f10a773b98d8fcb382aa9495d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5415272c79abc3d3065ed0b2b31a219d3e60f78f10a773b98d8fcb382aa9495d.exe
Resource
win10v2004-20220812-en
General
-
Target
5415272c79abc3d3065ed0b2b31a219d3e60f78f10a773b98d8fcb382aa9495d
-
Size
226KB
-
MD5
74d9bb3de4b6159bb51952a526a7c7e0
-
SHA1
60465bf750cc0c943ec03f59a957da0e9fa2b5a7
-
SHA256
5415272c79abc3d3065ed0b2b31a219d3e60f78f10a773b98d8fcb382aa9495d
-
SHA512
eb9305632e3cb3389a94aeb3c8c96b14766520d7a9abf6f90e31aa2fa8b52c4b310365ae8da21102d5733843af5be1d71d5cc73327fb511ba6c23dc2337ea4b6
-
SSDEEP
3072:au/0Tw7MFlalvPIU2ZsT5zwiD0709FPWV6qiu3ENwH65b78dwa+2RNr5fb9/sNL:kuMFlyn5Dy0dbkUNBqrLb9
Malware Config
Signatures
Files
-
5415272c79abc3d3065ed0b2b31a219d3e60f78f10a773b98d8fcb382aa9495d.exe windows x86
63de6cf2b2aa1619f7b2fec19d76e063
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
SetEvent
ResetEvent
HeapReAlloc
lstrlenA
VirtualAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSection
LoadLibraryA
FreeLibrary
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
Sleep
InterlockedDecrement
GetLastError
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
GetModuleHandleW
GetProcAddress
ole32
CoRegisterMallocSpy
StringFromGUID2
CLSIDFromString
shlwapi
PathFileExistsW
PathAppendW
PathRemoveFileSpecW
PathFindExtensionA
version
GetFileVersionInfoA
Sections
.text Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 26B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ