Static task
static1
Behavioral task
behavioral1
Sample
51de3d03145b00276c66a04e51da9c2505d471e1244b5d0e800744afd009fa71.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
51de3d03145b00276c66a04e51da9c2505d471e1244b5d0e800744afd009fa71.exe
Resource
win10v2004-20220812-en
General
-
Target
51de3d03145b00276c66a04e51da9c2505d471e1244b5d0e800744afd009fa71
-
Size
53KB
-
MD5
84e841a322fe0ee5a2e4716990827c60
-
SHA1
0e13de488dfaf73066efb46911243ae51abee60c
-
SHA256
51de3d03145b00276c66a04e51da9c2505d471e1244b5d0e800744afd009fa71
-
SHA512
90bee0a50a3f1f26ac78a0f1e0881ea150e649bd112db660aafbc1dc7e24807530f025ccd59e94125f1abc01c5ea436c41a9428b647898bdec7a8893b87fe37a
-
SSDEEP
768:m4nCmiaSFd5WrJe84DTyhJuYkh4RWbYn5qp33FBPBm2dDysO+ht/0E4/o6ZpZ40+:GJNpDT4JuY7Re2C3FBPXdDjLIjWglJP
Malware Config
Signatures
Files
-
51de3d03145b00276c66a04e51da9c2505d471e1244b5d0e800744afd009fa71.exe windows x86
c2cc3d1e520429df190f7febd39743d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetThreadLocale
GetTickCount
GetVersionExA
IsBadReadPtr
IsBadStringPtrW
IsDBCSLeadByteEx
GetFileSize
MulDiv
ReadFile
SetEvent
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WaitForMultipleObjects
WriteFile
GetCurrentDirectoryA
CloseHandle
GetCPInfoExW
FoldStringW
ExitProcess
EnterCriticalSection
DeviceIoControl
CreateThread
CreateFileA
CopyFileA
IsDebuggerPresent
wsock32
gethostbyname
WSACleanup
WSAStartup
user32
GetParent
GetPropW
GetWindowRect
InsertMenuW
InvalidateRect
IsWindow
MapWindowPoints
OffsetRect
SendMessageW
SetRect
SetWindowTextW
TranslateMessage
GetMessageA
GetClientRect
EndPaint
DispatchMessageA
ChildWindowFromPoint
BeginPaint
advapi32
AllocateLocallyUniqueId
GetSecurityDescriptorDacl
GetTokenInformation
MakeSelfRelativeSD
OpenThreadToken
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RevertToSelf
AccessCheck
Sections
.text Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE