Static task
static1
Behavioral task
behavioral1
Sample
5a750ef82ad29bf67f3b292300ff2e1fb0479aad6e12b577f121cb5480f7e3b8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5a750ef82ad29bf67f3b292300ff2e1fb0479aad6e12b577f121cb5480f7e3b8.exe
Resource
win10v2004-20220812-en
General
-
Target
5a750ef82ad29bf67f3b292300ff2e1fb0479aad6e12b577f121cb5480f7e3b8
-
Size
107KB
-
MD5
83d45a480489e24aace9cbd6540ade8e
-
SHA1
34de46cd378cf7c82961d4f0e99854472b7118e6
-
SHA256
5a750ef82ad29bf67f3b292300ff2e1fb0479aad6e12b577f121cb5480f7e3b8
-
SHA512
9654ff1bfd8cfca440568beedfa9fb1e872798a2be82a349e7033e7a0b444efabf5d433c9f4f565cb48cbf3be5a85c0e5b557ced1f2049dac7b9eddb36ea2437
-
SSDEEP
1536:rL0lzEuDR2HoVfwhB4HykBof+VJyLGLGveHVNYx1KdEQP5K1s14x5N1wdq:rqzJgHsU4HC+PHjGZA1+5N6dq
Malware Config
Signatures
Files
-
5a750ef82ad29bf67f3b292300ff2e1fb0479aad6e12b577f121cb5480f7e3b8.exe windows x86
4f42d836f964d3a291a623dfa01ceff6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedCompareExchange
GetTempPathA
lstrcpyA
GetConsoleMode
IsValidCodePage
OpenProcess
GetConsoleOutputCP
RtlMoveMemory
SizeofResource
GetProcAddress
GlobalFree
DeleteFileW
VirtualProtect
DeleteFileA
GetWindowsDirectoryA
SetThreadLocale
Sleep
GetStringTypeW
SetErrorMode
GetThreadLocale
LoadResource
GetModuleHandleA
MultiByteToWideChar
GetCurrentThread
ExitProcess
GetStdHandle
msvcrt
_exit
__p___initenv
__p__commode
_initterm
__set_app_type
_XcptFilter
__p__fmode
__getmainargs
_controlfp
_except_handler3
_adjust_fdiv
tan
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Jofil Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ