Static task
static1
Behavioral task
behavioral1
Sample
5c9dce8f5f45daf24c461118334c90ff8e9515e0656430c9730d3cb3b114f495.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5c9dce8f5f45daf24c461118334c90ff8e9515e0656430c9730d3cb3b114f495.exe
Resource
win10v2004-20220812-en
General
-
Target
5c9dce8f5f45daf24c461118334c90ff8e9515e0656430c9730d3cb3b114f495
-
Size
857KB
-
MD5
6b73715e898801d17e4cc63e2ee5c620
-
SHA1
a527c920d056b8719478505c3dea17ea4b87ee70
-
SHA256
5c9dce8f5f45daf24c461118334c90ff8e9515e0656430c9730d3cb3b114f495
-
SHA512
afb2b3bd4b0d10ae6385ec13e4e81f1762606ea7848150a4308d3e33cfd46f0c0c6379d10c5dc79d9787b90ace89c624074a0ef1884822cbd4a0ee6c96917571
-
SSDEEP
24576:Xf09nEigFFDjKhZFoGMQoWluSXlP7e3M:XfgETDirporSy
Malware Config
Signatures
Files
-
5c9dce8f5f45daf24c461118334c90ff8e9515e0656430c9730d3cb3b114f495.exe windows x86
d917ad7b0502839bd8e6b78e724fec29
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringW
SetEndOfFile
GetCommConfig
IsBadHugeWritePtr
WritePrivateProfileSectionW
GetDiskFreeSpaceA
UnhandledExceptionFilter
FreeEnvironmentStringsA
lstrcmpiA
WritePrivateProfileStructW
SetProcessShutdownParameters
GetExitCodeProcess
lstrcmpiW
SetVolumeLabelW
GetLocaleInfoA
EnumLanguageGroupLocalesA
DeleteVolumeMountPointA
IsProcessorFeaturePresent
SetMailslotInfo
FreeEnvironmentStringsW
GetVersionExA
GetPrivateProfileSectionA
GetSystemDefaultLangID
GetCurrentDirectoryW
CreateHardLinkW
GetTimeFormatA
InterlockedCompareExchange
SetEvent
GlobalAlloc
GetCurrencyFormatW
PurgeComm
SetLocaleInfoA
FindFirstVolumeW
FlushInstructionCache
WritePrivateProfileSectionA
SetPriorityClass
UnmapViewOfFile
OutputDebugStringA
GetStringTypeA
FindCloseChangeNotification
GetLocaleInfoW
SetEnvironmentVariableA
LocalCompact
FindFirstFileW
WaitCommEvent
BackupRead
CompareStringW
GetCommState
GetPrivateProfileStructA
FindNextVolumeMountPointA
LocalFileTimeToFileTime
GetLongPathNameW
FindAtomA
CommConfigDialogA
GetTimeFormatW
QueueUserWorkItem
GetStringTypeExA
VerifyVersionInfoA
SetErrorMode
FreeUserPhysicalPages
GetAtomNameW
GetTempPathA
SetThreadIdealProcessor
GetFileTime
MulDiv
GetThreadPriorityBoost
CreateFileMappingA
IsBadStringPtrW
VerSetConditionMask
ContinueDebugEvent
ReplaceFileA
SetNamedPipeHandleState
GetCompressedFileSizeW
SetTapePosition
DnsHostnameToComputerNameW
DeviceIoControl
lstrcpyW
GetModuleHandleW
FileTimeToSystemTime
GetPrivateProfileSectionW
SetHandleInformation
TlsSetValue
GetDateFormatA
GetComputerNameW
PrepareTape
GetFileInformationByHandle
WaitNamedPipeA
EnumDateFormatsExW
SetFileApisToOEM
ReadDirectoryChangesW
GetThreadLocale
GetCurrentDirectoryA
EnumResourceLanguagesW
FindResourceW
_hread
GlobalFix
ProcessIdToSessionId
LoadResource
LocalUnlock
GetFileAttributesExW
GetNumberFormatW
ResumeThread
_llseek
FoldStringW
SetLocalTime
CreateFileMappingW
GetCurrentThread
GetVolumeNameForVolumeMountPointW
lstrcpyA
CompareStringA
GetOverlappedResult
FileTimeToDosDateTime
SetCalendarInfoW
FlushViewOfFile
QueryPerformanceCounter
SearchPathA
ResetEvent
GetThreadPriority
GetSystemInfo
user32
DestroyWindow
CharUpperBuffW
TrackPopupMenuEx
ChildWindowFromPoint
CreateCaret
SetShellWindow
DlgDirListW
MessageBoxIndirectW
IsZoomed
GetGUIThreadInfo
SetSysColors
MsgWaitForMultipleObjects
CallWindowProcW
GetKeyState
LoadCursorFromFileW
TrackMouseEvent
GetWindowRgn
SetMenuItemInfoA
CopyImage
GetMessageA
GetLastInputInfo
EnableWindow
VkKeyScanA
CharLowerW
DdeGetData
shlwapi
PathAppendA
Sections
.text Size: 302KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 311KB - Virtual size: 615KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ