Static task
static1
Behavioral task
behavioral1
Sample
5f39bd47dbb7f0e40d23c4bea4b7efb245ec51cb246437e9bdf16a9eef98eb6f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5f39bd47dbb7f0e40d23c4bea4b7efb245ec51cb246437e9bdf16a9eef98eb6f.exe
Resource
win10v2004-20220812-en
General
-
Target
5f39bd47dbb7f0e40d23c4bea4b7efb245ec51cb246437e9bdf16a9eef98eb6f
-
Size
282KB
-
MD5
968bf8ddc50b7a406522e35bb0832e60
-
SHA1
bc4b54025f0a43190638480fe67e6f0eed1b15c0
-
SHA256
5f39bd47dbb7f0e40d23c4bea4b7efb245ec51cb246437e9bdf16a9eef98eb6f
-
SHA512
a6e19669731d1733e68b08be2e0a925a9670635bfb65854d5a4d55c1ef0110e2867180c205aa386a9855e1e122e7fe19cf3b97e408087c5e467254e63deddc4e
-
SSDEEP
6144:3RRQx/g17ISIv12CDNmcrudKNEJ6E69JBEQpWXkWWu/W1YtveM4B:hRQxI18SW12eccrxO65BEZboEv34B
Malware Config
Signatures
Files
-
5f39bd47dbb7f0e40d23c4bea4b7efb245ec51cb246437e9bdf16a9eef98eb6f.exe windows x86
7335742738d6b1ebaffac822cc9bbfd9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
olecli32
LeObjectLong
LeQueryBounds
LeRelease
LeGetUpdateOptions
LeSaveToStream
LeSetBounds
LeQueryOpen
LeQueryOutOfDate
LeObjectConvert
LeReconnect
LeSetData
kernel32
SystemTimeToFileTime
lstrcpyW
CloseHandle
GlobalFindAtomA
FindResourceW
CreateFileA
GetSystemTimeAsFileTime
LoadLibraryW
GetLocalTime
lstrcmpA
SetUnhandledExceptionFilter
SetLastError
GetTickCount
HeapAlloc
WideCharToMultiByte
GetCurrentProcess
HeapFree
MultiByteToWideChar
GetUserDefaultLCID
GetProcessHeap
QueryPerformanceCounter
lstrlenW
GetCurrentProcessId
psapi
EnumPageFilesA
EnumProcessModules
EmptyWorkingSet
EnumPageFilesW
GetProcessImageFileNameA
GetPerformanceInfo
Sections
.text Size: 210KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ