Static task
static1
Behavioral task
behavioral1
Sample
c5bd28f58774df94a0d6bbc4ccc1ba2ddfa0b59352ed48e823e6281c7c40547f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c5bd28f58774df94a0d6bbc4ccc1ba2ddfa0b59352ed48e823e6281c7c40547f.exe
Resource
win10v2004-20220812-en
General
-
Target
c5bd28f58774df94a0d6bbc4ccc1ba2ddfa0b59352ed48e823e6281c7c40547f
-
Size
148KB
-
MD5
809274298247dc030d0f0dcd223d3039
-
SHA1
d48ed7f49ca5305722116530abc6858873e56409
-
SHA256
c5bd28f58774df94a0d6bbc4ccc1ba2ddfa0b59352ed48e823e6281c7c40547f
-
SHA512
db32dea2054d2f02cec750fa12c7ef407639f370501a23795e80bcdb84240b47f2d3c95187b87c945655dfdc3eadc0f9ab81f70b35fadc4bcd05c593aed45966
-
SSDEEP
3072:kkhjCoXe7pRz61FHyFUYfg2x2fhpMfbU:lFu7Dz61FHF2Mqb
Malware Config
Signatures
Files
-
c5bd28f58774df94a0d6bbc4ccc1ba2ddfa0b59352ed48e823e6281c7c40547f.exe windows x86
d6704e3bb5599bf3c8dd73bf4aaf8c57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryA
GetLastError
CreateMutexA
GetTimeFormatA
OutputDebugStringA
GetStartupInfoA
GetModuleHandleA
WriteConsoleA
ExitProcess
GetModuleFileNameA
lstrlenA
GetStdHandle
GetLocalTime
WriteFile
CreateFileA
CloseHandle
GetDateFormatA
user32
DispatchMessageA
TranslateMessage
PeekMessageA
MessageBoxA
winmm
PlaySoundA
chromeengine2
CreateGame
UninitializeGameScript
InitializeGameScript
msvcrt
_splitpath
fclose
fgets
fopen
strstr
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
strrchr
_mkdir
vsprintf
free
fwrite
ftell
fseek
fread
malloc
tolower
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
?terminate@@YAXXZ
_controlfp
_spawnlp
strncmp
strncpy
_findfirst
_findclose
_spawnv
_stricmp
_strdup
_strlwr
sprintf
calloc
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ