Static task
static1
Behavioral task
behavioral1
Sample
5be1262429df10ec1860428e9efc4c5dc45ed30cb5d14a7406ac321ac9ee47a4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5be1262429df10ec1860428e9efc4c5dc45ed30cb5d14a7406ac321ac9ee47a4.exe
Resource
win10v2004-20220812-en
General
-
Target
5be1262429df10ec1860428e9efc4c5dc45ed30cb5d14a7406ac321ac9ee47a4
-
Size
264KB
-
MD5
8bf7eda8fab4a0d84f03e995d7ff7ebe
-
SHA1
43ddd17cb87f6568eebc83f5a39e29143112af80
-
SHA256
5be1262429df10ec1860428e9efc4c5dc45ed30cb5d14a7406ac321ac9ee47a4
-
SHA512
758104e99a21bff65df4369098271fb8f2bcc8950efa9b1137c29065019eed44c730acc224e75651ede248a4565f57e9ed9666d90908956c7709c9fe39b60ba0
-
SSDEEP
3072:tThxa86rCYvJaauQMqSIWtXUyKC7poUBKoAk2cHmDeGAIkux:xhL6rCl/QzSIWVUVC1focH6eOku
Malware Config
Signatures
Files
-
5be1262429df10ec1860428e9efc4c5dc45ed30cb5d14a7406ac321ac9ee47a4.exe windows x86
38bb6c1a0f363486a3435003811454ef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryA
CompareStringW
CompareStringA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
CreateProcessA
WaitForSingleObject
GetTickCount
CreateFileA
FlushFileBuffers
SetStdHandle
VirtualAlloc
HeapReAlloc
HeapAlloc
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTime
Sleep
GetExitCodeProcess
GetLocalTime
MultiByteToWideChar
SetConsoleCtrlHandler
SetFilePointer
RtlUnwind
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetFileAttributesA
ReadFile
CloseHandle
GetLastError
HeapValidate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsBadWritePtr
IsBadReadPtr
SetEnvironmentVariableA
user32
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
SendMessageA
LoadIconA
CreateDialogParamA
MessageBoxA
EndDialog
GetDlgItemTextA
CheckDlgButton
IsDlgButtonChecked
PostQuitMessage
DestroyWindow
EnableWindow
SetDlgItemTextA
DialogBoxParamA
GetDlgItem
advapi32
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
shell32
SHFileOperationA
ws2_32
inet_ntoa
gethostbyname
gethostname
WSAGetLastError
WSAStartup
select
connect
WSACleanup
closesocket
ioctlsocket
setsockopt
htons
inet_addr
socket
send
recv
shlwapi
PathFileExistsA
Sections
.text Size: 188KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uckglgf Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE