Static task
static1
Behavioral task
behavioral1
Sample
5bca3a383e9991f295aeeb5e5e2c12dee227db6b5e696eb7c72775a6fa53cf52.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5bca3a383e9991f295aeeb5e5e2c12dee227db6b5e696eb7c72775a6fa53cf52.exe
Resource
win10v2004-20220812-en
General
-
Target
5bca3a383e9991f295aeeb5e5e2c12dee227db6b5e696eb7c72775a6fa53cf52
-
Size
46KB
-
MD5
4adeba495a00c9b735eb04ef6e5f5740
-
SHA1
6e55a2e062f82e18cf1395f0323abfdbb0aab80e
-
SHA256
5bca3a383e9991f295aeeb5e5e2c12dee227db6b5e696eb7c72775a6fa53cf52
-
SHA512
77051f497692cccbafd35602f31cdcc22606ea8eedddf70ea848e6b691de862137c36b6efd9de1b4f6b1f9f7560885d2f17a1e1c5b3e9a1710c589853f3933c7
-
SSDEEP
768:SNFByLXM/4Ud8fbdpxlrcqScMTuNbb4XJvuG+Qejyr7xCtwdOeYI45zl5c:SfYLXM/448TxlrbSctN4cAuyHxCa+I2I
Malware Config
Signatures
Files
-
5bca3a383e9991f295aeeb5e5e2c12dee227db6b5e696eb7c72775a6fa53cf52.exe windows x86
199aaa68c30fec66183cab947708016d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
TlsAlloc
RtlUnwind
GetLastError
VirtualFree
SetErrorMode
GetEnvironmentStringsA
FreeLibrary
InterlockedIncrement
HeapSize
SetLastError
GetCurrentDirectoryA
VirtualQuery
GetStdHandle
SetHandleCount
InterlockedDecrement
RaiseException
ReadFile
SetFileTime
FreeEnvironmentStringsA
FindFirstFileA
SetEnvironmentVariableA
HeapCreate
DeleteFileA
GetLocaleInfoA
FileTimeToLocalFileTime
GetCurrentProcess
LeaveCriticalSection
CompareStringW
FindClose
FileTimeToSystemTime
lstrcmpiA
GetStartupInfoA
GetFileType
LockFile
GetVolumeInformationA
WideCharToMultiByte
CreateDirectoryA
GlobalUnlock
TlsGetValue
GetFileTime
GetDriveTypeA
GetUserDefaultLCID
GlobalLock
HeapFree
GetLocalTime
GetTickCount
SetLocalTime
GetTimeZoneInformation
GetModuleFileNameW
UnlockFile
CreateFileA
LCMapStringA
GetStringTypeW
GetVersion
GetComputerNameA
FormatMessageW
IsValidCodePage
GetModuleFileNameA
IsBadReadPtr
HeapAlloc
GetUserDefaultLangID
FreeEnvironmentStringsW
MultiByteToWideChar
DeleteCriticalSection
GetFileAttributesA
GetCommandLineA
GetEnvironmentStrings
SetCurrentDirectoryA
SetFileAttributesA
SetEndOfFile
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GlobalAlloc
GetLocaleInfoW
GetCPInfo
GetFullPathNameA
LCMapStringW
TlsSetValue
RemoveDirectoryA
FindNextFileA
IsDBCSLeadByte
GlobalFree
LoadLibraryW
GetStringTypeA
CloseHandle
HeapDestroy
SetFilePointer
advapi32
RegDeleteValueW
RegEnumValueW
RegOpenKeyW
RegQueryValueExW
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyA
RegQueryValueExA
OpenProcessToken
AdjustTokenPrivileges
RegCreateKeyA
RegCreateKeyW
LookupPrivilegeValueA
RegCloseKey
RegEnumKeyW
RegSetValueExA
RegDeleteKeyW
RegEnumKeyA
RegSetValueExW
RegDeleteValueA
RegDeleteKeyA
user32
SetForegroundWindow
CharLowerBuffW
GetSystemMetrics
CharUpperBuffW
SetFocus
CharLowerBuffA
CallNextHookEx
SetWindowsHookExW
SendMessageA
GetForegroundWindow
FindWindowA
CharToOemA
OemToCharA
LoadStringA
keybd_event
GetDesktopWindow
GetAsyncKeyState
IsWindowEnabled
AttachThreadInput
FindWindowW
GetKeyboardLayout
VkKeyScanW
GetFocus
GetWindow
GetKeyboardState
MessageBeep
WaitForInputIdle
SetWindowsHookExA
UnhookWindowsHookEx
GetWindowTextA
IsWindowVisible
GetWindowThreadProcessId
SetKeyboardState
CharUpperBuffA
VkKeyScanA
ole32
CoCreateInstance
MkParseDisplayName
CreateBindCtx
CoGetClassObject
CoGetMalloc
BindMoniker
CoDisconnectObject
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ