Static task
static1
Behavioral task
behavioral1
Sample
572e86c6c27ab79168f5fc701644b30d8f5f92d7935ad73f5071b991c6c2b7fc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
572e86c6c27ab79168f5fc701644b30d8f5f92d7935ad73f5071b991c6c2b7fc.exe
Resource
win10v2004-20220812-en
General
-
Target
572e86c6c27ab79168f5fc701644b30d8f5f92d7935ad73f5071b991c6c2b7fc
-
Size
493KB
-
MD5
830fff3e11f64ca2abe44735bf35cf80
-
SHA1
451db4c5f0fb2c0e374cb2794844e78cd60c0dab
-
SHA256
572e86c6c27ab79168f5fc701644b30d8f5f92d7935ad73f5071b991c6c2b7fc
-
SHA512
52f23c7cf59615501f17e5e69987466bebd82de5756931fa50747328e63ddb25399aa9ce523afc487744173e5ec1970d8dcd5cfcc2bf879bb445a9a85a10d5ec
-
SSDEEP
12288:fYR+b/nwoyY6Eu00O0XXR0BrADjsiPYS3:C0UTVDIiQs
Malware Config
Signatures
Files
-
572e86c6c27ab79168f5fc701644b30d8f5f92d7935ad73f5071b991c6c2b7fc.exe windows x86
b63f7c3d0e1f2ecfcd655a398b933c05
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryW
LocalAlloc
GetCPInfo
GetProcAddress
FreeLibrary
VirtualFree
WideCharToMultiByte
GetModuleHandleA
ExpandEnvironmentStringsW
GetCurrentProcessId
RemoveDirectoryW
LoadLibraryA
GetLastError
GetTickCount
GetModuleFileNameW
MultiByteToWideChar
LocalFree
msvcrt
_c_exit
_adjust_fdiv
_XcptFilter
_initterm
_stricmp
strstr
_wcsicmp
wcscpy
__wgetmainargs
_exit
sprintf
__p__fmode
_except_handler3
_controlfp
_cexit
__setusermatherr
printf
__winitenv
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExA
tapi32
lineInitialize
lineGetTranslateCapsW
rasdlg
RasDialDlgW
RasAutodialQueryDlgW
RasPhonebookDlgW
Sections
.rdata Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fguj5 Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ