Static task
static1
Behavioral task
behavioral1
Sample
04c5e32f1ad3b450377e942b63a0460015d5f68deb6c3acac6ae3e7752d1aaf2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
04c5e32f1ad3b450377e942b63a0460015d5f68deb6c3acac6ae3e7752d1aaf2.exe
Resource
win10v2004-20220812-en
General
-
Target
04c5e32f1ad3b450377e942b63a0460015d5f68deb6c3acac6ae3e7752d1aaf2
-
Size
99KB
-
MD5
005274a54b92a1008ac96147a11bd848
-
SHA1
9c0e39e454ea6f119b22b049594b283b6e92a977
-
SHA256
04c5e32f1ad3b450377e942b63a0460015d5f68deb6c3acac6ae3e7752d1aaf2
-
SHA512
5f610b2251ea38a6df2a571405272895d8839eb2247033fafd1a1c5c7818999bda26141a0feb4b56be16fd0cf490a05ef046e482d48f19a2bd595a1d072da5dd
-
SSDEEP
1536:LRJ4tFqijmDvKwaKNFaAENGzYE+ycXUEK/9sEpm8WzMvHBThOIUHlA1Ja79:LkFqijBgEyzY7g55WzMZThOIUH61c5
Malware Config
Signatures
Files
-
04c5e32f1ad3b450377e942b63a0460015d5f68deb6c3acac6ae3e7752d1aaf2.exe windows x86
6081abd02e06ad157363bbec38866d39
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
GetRequestedRuntimeInfo
GetRequestedRuntimeVersion
CorBindToRuntimeEx
GetCORVersion
LoadLibraryShim
GetRealProcAddress
CorGetSvc
GetCORSystemDirectory
msvcr80
_vsnprintf
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
?terminate@@YAXXZ
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__winitenv
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
free
malloc
_putws
_flushall
wcstoul
towupper
memmove
_vsnprintf_s
_errno
wcsncpy_s
wcscpy_s
strcpy_s
wcsncmp
strncmp
_vsnwprintf_s
strchr
_CxxThrowException
_wtoi
_wcsicmp
tolower
_wcsnicmp
exit
_purecall
memset
wcscat_s
__CxxFrameHandler3
memcpy
_vswprintf_c_l
advapi32
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegCloseKey
kernel32
GetEnvironmentVariableW
GetEnvironmentVariableA
GetCurrentDirectoryW
GetCurrentDirectoryA
GetFileAttributesExW
GetFileAttributesExA
GetFileAttributesW
GetFileAttributesA
CreateEventW
CreateEventA
CreateMutexW
LocalAlloc
FormatMessageA
FormatMessageW
CreateProcessA
CreateProcessW
DebugBreak
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
TlsSetValue
TlsAlloc
TlsFree
HeapAlloc
GetProcessHeap
HeapFree
WaitForSingleObjectEx
ReleaseMutex
SleepEx
VirtualAlloc
VirtualFree
VirtualQuery
VirtualProtect
HeapCreate
HeapDestroy
HeapValidate
InterlockedExchange
Sleep
SetUnhandledExceptionFilter
GetTickCount
UnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameA
CloseHandle
WaitForSingleObject
GetCurrentProcessId
GetLocalTime
WriteFile
GetStdHandle
RaiseException
GetConsoleOutputCP
SetErrorMode
SetLastError
GetLastError
TlsGetValue
InterlockedCompareExchange
GetModuleHandleA
FreeLibrary
InterlockedIncrement
InterlockedDecrement
lstrlenW
GetCurrentProcess
LocalFree
MultiByteToWideChar
IsDBCSLeadByte
GetCPInfo
GetACP
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetFilePointer
GetVersionExA
GetModuleHandleW
WideCharToMultiByte
TerminateProcess
LoadLibraryExA
LoadLibraryExW
GetFullPathNameA
GetFullPathNameW
CreateMutexA
GetModuleFileNameW
CreateFileA
CreateFileW
CopyFileA
DeleteFileA
MoveFileExW
CreateSemaphoreA
CreateSemaphoreW
LCMapStringA
LCMapStringW
GetVersionExW
OutputDebugStringA
OutputDebugStringW
oleaut32
SetErrorInfo
SysAllocString
SysFreeString
user32
LoadStringA
LoadStringW
Sections
.text Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.TOT Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE