Static task
static1
Behavioral task
behavioral1
Sample
530cf6747ba14f8facbd9416bdcd23a91f00536221b89c0855eb23aa9afc21d2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
530cf6747ba14f8facbd9416bdcd23a91f00536221b89c0855eb23aa9afc21d2.exe
Resource
win10v2004-20220812-en
General
-
Target
530cf6747ba14f8facbd9416bdcd23a91f00536221b89c0855eb23aa9afc21d2
-
Size
326KB
-
MD5
0b1ffa8fd43521e263b5529fa5c8ad46
-
SHA1
90d734b543c6739770a8debe9fd975349293fbf4
-
SHA256
530cf6747ba14f8facbd9416bdcd23a91f00536221b89c0855eb23aa9afc21d2
-
SHA512
0e690d761b60629c959d6dc7c81e7c63d1b139645b33e3f4dffdb8fbe0d42e599400f86f6f2fa6e69d7f594b63e4a65e26f7ff1f087d84af45e559fa22000d5e
-
SSDEEP
6144:sRQAlazpUdk3o6WWB2r78FRc+mMzUuHSDwvBOzsT80/alsafVIa9XqEioBs/wliJ:TXv3odtr76/jzUwEE+yn/Gma9YoBs/C5
Malware Config
Signatures
Files
-
530cf6747ba14f8facbd9416bdcd23a91f00536221b89c0855eb23aa9afc21d2.exe windows x86
e7ad98bcb747692b5a89ab8640f4025b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ReadFile
SetFilePointer
TlsFree
RaiseException
InterlockedCompareExchange
GetCommandLineA
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetCurrentProcessId
SizeofResource
FileTimeToLocalFileTime
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
GetSystemInfo
LCMapStringW
GetLastError
InterlockedIncrement
ExitProcess
TlsSetValue
GetFileType
CreateFileW
GetProcAddress
FindNextFileA
CreateFileMappingA
CompareStringA
CompareStringW
GetProcessHeap
WaitForMultipleObjects
SetErrorMode
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
VirtualProtect
TlsAlloc
GetTickCount
QueryPerformanceCounter
FreeLibrary
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
GetACP
GetVersion
GetLocaleInfoA
SetEndOfFile
GetConsoleMode
VirtualQuery
TerminateProcess
MulDiv
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
CreateMutexA
GetLocalTime
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
lstrcmpiA
GetCPInfo
SetStdHandle
FreeEnvironmentStringsW
LoadLibraryExW
CreateFileA
LocalAlloc
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
WaitForSingleObject
FileTimeToSystemTime
GetStdHandle
GetCurrentThread
GlobalLock
GetModuleHandleW
GetCurrentThreadId
GetEnvironmentStrings
IsValidCodePage
UnmapViewOfFile
VirtualFree
Sleep
WriteConsoleW
VirtualAlloc
advapi32
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExW
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCloseKey
user32
SetCursor
ReleaseDC
CallWindowProcA
GetClientRect
SendMessageA
InvalidateRect
SystemParametersInfoA
GetSysColor
MessageBeep
GetFocus
SetForegroundWindow
GetDesktopWindow
ScreenToClient
GetDlgItem
CheckMenuItem
SetWindowTextA
EndDialog
SetWindowLongA
PostMessageA
GetWindowRect
BeginPaint
FillRect
IsIconic
TranslateMessage
EnableWindow
ShowWindow
UpdateWindow
GetParent
DestroyWindow
GetCursorPos
GetDC
EndPaint
DispatchMessageA
IsWindow
SetWindowPos
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 305KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ