Static task
static1
Behavioral task
behavioral1
Sample
05040a8985c65a59f6db8a2e0447b4d5beeb9ba9e5c459a206fdfdbc72b8160a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
05040a8985c65a59f6db8a2e0447b4d5beeb9ba9e5c459a206fdfdbc72b8160a.exe
Resource
win10v2004-20220812-en
General
-
Target
05040a8985c65a59f6db8a2e0447b4d5beeb9ba9e5c459a206fdfdbc72b8160a
-
Size
122KB
-
MD5
69822ba80313df598397544129236470
-
SHA1
b7bc1b3339bf190fbd1bf5f00d256055ce3f8b90
-
SHA256
05040a8985c65a59f6db8a2e0447b4d5beeb9ba9e5c459a206fdfdbc72b8160a
-
SHA512
12acfc99cd032af95dcb3f6d6d2403c7fd253e55568994d304393bcaae2c346354b88a2d84b3c26f2ffcabc6cbc6ee0dc007154ae32fa870f2670ebc819baeca
-
SSDEEP
3072:szxh/47QiylhJuJclZxlwVIfdiII+t/QXJ5aE1g:Mxh/UVx27EAdiI//YJ5aE1
Malware Config
Signatures
Files
-
05040a8985c65a59f6db8a2e0447b4d5beeb9ba9e5c459a206fdfdbc72b8160a.exe windows x86
e95825a69e1d6eb3c28fdf1aa850b7b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
kernel32
GetCommandLineA
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
RtlUnwind
RaiseException
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapDestroy
GetVersionExA
VirtualFree
Sleep
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
IsBadWritePtr
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
InterlockedExchange
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
FlushFileBuffers
SetStdHandle
SetFilePointer
CreateProcessA
GetExitCodeProcess
GetSystemDirectoryA
CreateFileA
CloseHandle
HeapCreate
ExpandEnvironmentStringsA
lstrlenA
GetWindowsDirectoryA
user32
MessageBoxA
CharNextA
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageA
LoadStringA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ