Static task
static1
Behavioral task
behavioral1
Sample
52c5b43c2ba05abb0423dd70f13e09f799a8e3954c997378233fc1c777a1245b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
52c5b43c2ba05abb0423dd70f13e09f799a8e3954c997378233fc1c777a1245b.exe
Resource
win10v2004-20220901-en
General
-
Target
52c5b43c2ba05abb0423dd70f13e09f799a8e3954c997378233fc1c777a1245b
-
Size
52KB
-
MD5
03936ceb76dfe0e0b610949881d68c80
-
SHA1
15b638d73733af5a102a9f1f48d303edd5d9c820
-
SHA256
52c5b43c2ba05abb0423dd70f13e09f799a8e3954c997378233fc1c777a1245b
-
SHA512
63f9819267ef98c346d1dff13c360752dcef11649380a57bb2f4fab2ae84361c91999242ebd1cd7886a914f42118dc7c9efcd8980465dba6451fdb436372ad87
-
SSDEEP
768:X/y4OWoixMW28hSUapbg04M3he3o9ie8b22:AWcXpbAo9ie8i2
Malware Config
Signatures
Files
-
52c5b43c2ba05abb0423dd70f13e09f799a8e3954c997378233fc1c777a1245b.exe windows x86
cb148cd8e0113042f31c9c6d3e6d4c72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
ReadFile
PeekNamedPipe
Sleep
WriteFile
TransactNamedPipe
SetNamedPipeHandleState
GetLastError
CreateFileA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
CloseHandle
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
SetFilePointer
SetStdHandle
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE