Static task
static1
Behavioral task
behavioral1
Sample
2c52ea04d7e65017bd5a40050fa47980d3e2f277ebcc7fd2a5484e0b80859d9b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2c52ea04d7e65017bd5a40050fa47980d3e2f277ebcc7fd2a5484e0b80859d9b.exe
Resource
win10v2004-20220812-en
General
-
Target
2c52ea04d7e65017bd5a40050fa47980d3e2f277ebcc7fd2a5484e0b80859d9b
-
Size
436KB
-
MD5
6298740b8f0b3ec64b0a789214d10010
-
SHA1
dd08933543569499c4e698e5bd9b26ce66a9ea13
-
SHA256
2c52ea04d7e65017bd5a40050fa47980d3e2f277ebcc7fd2a5484e0b80859d9b
-
SHA512
b21c43b6c54eff60d202525ae4198731c5a1c2938133898f3d28be913f853861f303e579d99df4cf40bc03e27e25ce0d6710627f2701832e942d6338c320d05d
-
SSDEEP
12288:GW6Oht3+6CjXmq5VCiZMbl5B8K8DBbdo1tYQ4d:4it3w/WDB8KgBbd
Malware Config
Signatures
Files
-
2c52ea04d7e65017bd5a40050fa47980d3e2f277ebcc7fd2a5484e0b80859d9b.exe windows x86
9d84560a3c5d59065fc4be0c8f39ca37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GetTempPathA
GetProcAddress
GetTickCount
VirtualAlloc
OpenEventA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
RtlUnwind
TerminateProcess
ExitProcess
LoadLibraryExA
CloseHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualQuery
user32
SetWindowTextA
ShowWindow
wsprintfA
gdi32
SelectObject
avifil32
AVIClearClipboard
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 404KB - Virtual size: 863KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ