Static task
static1
Behavioral task
behavioral1
Sample
5f32bc3e129ec72642322b1da3a796bfeb85dba8de58986c054420eb958dbe36.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f32bc3e129ec72642322b1da3a796bfeb85dba8de58986c054420eb958dbe36.exe
Resource
win10v2004-20220812-en
General
-
Target
5f32bc3e129ec72642322b1da3a796bfeb85dba8de58986c054420eb958dbe36
-
Size
46KB
-
MD5
96c39d69cfe83504817b5ec1271a0800
-
SHA1
9d5305b9e29b4222ced5ec3988897ee56c0fde9d
-
SHA256
5f32bc3e129ec72642322b1da3a796bfeb85dba8de58986c054420eb958dbe36
-
SHA512
2272138edf80508226c249aeaffd38f4acff159cf55582149d5123edc1375616abd104ae47dae0b9ce00db49e36ec90b975eb184be3529668bd7b287d23c33e1
-
SSDEEP
768:DRmlUcAXtj9iCSSDaXdF+lF7P7J5reaCn+9JO2shY8PLUpb6VPvYqBN6cNFfAXw7:klJstjJSY+A37feaCMJDmYsLIb4PvYqL
Malware Config
Signatures
Files
-
5f32bc3e129ec72642322b1da3a796bfeb85dba8de58986c054420eb958dbe36.exe windows x86
845abb073f183ac0f98bbac714de2284
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
advapi32
RegCloseKey
RegCreateKeyExA
RegSetValueExA
msvcr80
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm_e
__set_app_type
_crt_debugger_hook
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
fclose
fprintf
fopen_s
sprintf_s
_encode_pointer
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ